palo alto globalprotect vpn client cannot download outside network

These commands take into effect immediately and will survive a reboot of the firewall. VPN worked just fine on the same computer using cable network. Spouse needs to set up VPN to work from home, but even IT from the office could not get VPN to work via T-Mobile Home Internet. Signal strength is 2 bars (weak, but functional). So, you can generate your certificate on the Palo Alto firewall or you can use any certificate which is signed by any of the CA authority. Userlevel 1 J57little First activity 0 replies All devices and home network are good. This will set the Host Agent Download back to default settings where the Agent is downloaded from the Global Protect Portal. To configure the GlobalProtect VPN, you must need a valid root CA certificate. Disable the global-protect redirect by the CLI command set global-protect redirect off. GlobalProtect for Android connects to a GlobalProtect gateway on a Palo Alto Networks next-generation firewall to allow mobile users to benefit from.Replace the URL below with the correct URL location configured for your site.Ĭfg.: => corrected URL location. Correct the URL location to the site which hosts the GP agent software using command set global-protect redirect location.Verify the configured redirect URL location on the firewall using set global-protect redirect show command.Ĭfg.: => wrongly configured URL.Misconfiguration of redirect location in the Firewall to a wrong URL causes this issue. Firewall configured with redirect GlobalProtect Host Agent Download to another website.

Windows and Mac clients as GlobalProtect (GP) Endpoints.Once the desired agent is selected to be downloaded, it fails with error: This site can't be reached.Endpoint clients connect to Global Protect Portal and they are presented with GP agent download options.

Palo alto globalprotect vpn client cannot download outside network