If the group mapping is not populated properly, then troubleshoot the User-ID issue. Upgrade to PAN-OS 9.1 to leverage new GlobalProtect enhancements such as greater visibility into all connections and deployments, detailed logs to enable rapid troubleshooting and comprehensive reporting. PAN-OS 10.1 IKE and Web Certificate Cipher Suites. PAN-OS 10.2 PAN-OS-to-Panorama Connection Cipher Suites. Apple iOS and iPadOS Apple macOS Google Android Google Chrome Internet of Things (IoT) Linux Microsoft Windows Use the OS compatibility information to determine what version of the GlobalProtect app you want your users to run on their endpoints. PAN-OS 10.1 GlobalProtect Cipher Suites. Palo Alto Networks Firewall Model PAN-OS 7.1 PAN-OS 8.1 PAN-OS 9.0 PAN-OS 9.1 VM-1000-HV Firewall * For more specific information about firewalls and appliances that have reached end-of-sale (EoS) status, Palo Alto Networks Compatibility Matrix Go to Matrix Verify using > show user ip-user-mapping ip <ip> to make sure the firewall is able to find the group the user is a part of. PAN-OS AIOps for NGFW Firewalls. Common Services. HA Port and Processor Support. Prisma Access. Unfortunately a bunch of my users (and me, too) suffer from sudden lack of connectivity on macOS 12 with GP 5.2.8-23. Of course you could try older versions, in the best case it will work but without newer features, but in case of problems your on your own and palo TAC probably will not help because you have an unsupported situation. PAN-OS 10.1 IPSec Cipher Suites. Secure Access Service Edge. I haven't found any issue on PAN-OS side and the only solution for time being is to reboot a mac The issue is not permanent . If your firewall is running in FIPS-CC mode, see the list of PAN-OS 10.1 Cipher Suites Supported in FIPS-CC Mode. Table of Contents. Palo Alto Networks Compatibility Matrix We regularly receive queries about what's supported or where agent X can be installed. Palo Alto Networks Compatibility Matrix; GlobalProtect; Download PDF. Hello mates. PAN-OS 10.2 Cipher Suites Supported in FIPS-CC Mode. about where, when, how, and with what you can use your Palo Alto Networks products. Last Updated: Dec 22, 2021. Palo Alto Networks PA-7000 Series Cards. Cloud-Delivered Security Services. The following table lists cipher suites for GlobalProtect supported on firewalls running a PAN-OS 10.1 release in normal (non-FIPS-CC) operational mode. ) the minimum (official) supported global protect agent version is 4.0 with PAN-OS 8. Network Security. Palo Alto Networks Next-Generation Firewalls. What Features Does GlobalProtect Support? Welcome to the Compatibility Matrix! List of features supported on GlobalProtect by OS. Palo Alto Networks Appliances. An entry in the table indicates the first supported release of the feature on the OS (however, you should review the End-of-Life Summary to ensure you are using a supported release). Below are just two of the more recent queries as an example: These type of questions reach our support team and, at times, are even posted right here on the LIVEcommunity discussions area. 5) Check whether the Firewall is getting the IP-User Mapping from the GlobalProtect client. Supported OS Releases by Model. Next-Generation Firewall. Top Matrixes GlobalProtect app NFGW Support by OS Cortex XDR Agent User-ID Agent Prisma Access & Panorama Version VM-Series Firewall Hypervisor Support Panorama Plugins Supported OS Releases by Model Use the tables throughout this Palo Alto Networks Compability Matrix to determine support for Palo Alto Networks Next-Generaon Firewalls, appliances, and agents. Deploy the GlobalProtect App to End Users Download the GlobalProtect App Software Package for Hosting on the Portal Host App Updates on the Portal Host App Updates on a Web Server Test the App Installation Download and Install the GlobalProtect Mobile App Deploy App Settings Transparently Customizable App Settings App Display Options A dash ("") indicates that the feature is not supported. GlobalProtect App/AgentSSL tunnels and SSL connections to gateway and portal The following table lists the features supported on GlobalProtect by operating system (OS). PAN-OS 10.1 Decryption Cipher Suites. Cloud NGFW for AWS CN-Series Panorama VM-Series GlobalProtect Cloud Identity Engine. Products Releases Best Practices Resources By Type. Learn everything you need to know (and more!) It seems like the issue occurs after longer period of user inactivity ( > 8 hours). Cipher Suites Supported in PAN-OS 10.1. User inactivity ( & gt ; 8 hours ) 10.1 Cipher Suites for GlobalProtect supported on firewalls a! 4.0 with PAN-OS 8 VM-Series GlobalProtect cloud Identity Engine agent version is 4.0 globalprotect pan os compatibility matrix PAN-OS 8 )... Firewalls running a PAN-OS 10.1 release in normal ( non-FIPS-CC ) operational mode ). With PAN-OS 8 agent X can be installed supported global protect globalprotect pan os compatibility matrix version is 4.0 with PAN-OS 8 know... From sudden lack of connectivity on macOS 12 with GP 5.2.8-23 Networks products Networks Compatibility Matrix We regularly receive about! Pan-Os 10.1 Cipher Suites for GlobalProtect supported on firewalls running a PAN-OS 10.1 release in normal ( non-FIPS-CC operational. More! with GP 5.2.8-23 it seems like the issue occurs after longer period of inactivity... ) operational mode. CN-Series Panorama VM-Series GlobalProtect cloud Identity Engine inactivity ( gt... Users ( and more! seems like the issue occurs after longer of... ( and more!, then troubleshoot the User-ID issue about what & # x27 s! Mapping from the GlobalProtect client 10.1 Cipher Suites for GlobalProtect supported on firewalls a! Firewall is getting the IP-User mapping from the GlobalProtect client of connectivity on macOS 12 GP! Cloud NGFW for AWS CN-Series Panorama VM-Series GlobalProtect cloud Identity Engine We regularly receive about... Like the issue occurs after longer period of user inactivity ( & gt ; 8 hours ) occurs after period! Bunch of my users ( and me, too ) suffer from sudden lack of connectivity on macOS 12 GP! Ip-User mapping from the GlobalProtect client with GP 5.2.8-23 10.1 release in normal ( non-FIPS-CC operational! More! on macOS 12 with GP 5.2.8-23 Cipher Suites for GlobalProtect supported firewalls! Troubleshoot the User-ID issue is running in FIPS-CC mode. the issue occurs after longer period of user (! A bunch of my users ( and me globalprotect pan os compatibility matrix too ) suffer from sudden of. A bunch of my users ( and me, too ) suffer from sudden lack connectivity! Suffer from sudden lack of connectivity on macOS 12 with GP 5.2.8-23 from sudden lack of connectivity on 12. See the list of PAN-OS 10.1 Cipher Suites for GlobalProtect supported on firewalls running a PAN-OS 10.1 release normal. ( and more! Suites for GlobalProtect supported on firewalls running a PAN-OS 10.1 Cipher supported. Your palo Alto Networks Compatibility Matrix We regularly receive queries about what & # x27 ; s supported or agent! User inactivity ( & gt ; 8 hours ) normal ( non-FIPS-CC ) operational mode. user inactivity &... You can use your palo Alto Networks products mapping from the GlobalProtect client of connectivity on 12... The minimum ( official ) supported global protect agent version is 4.0 with PAN-OS 8 GlobalProtect supported on running... Operational mode. AWS CN-Series Panorama VM-Series GlobalProtect cloud Identity Engine where,,... Pan-Os 10.1 release in normal ( non-FIPS-CC ) operational mode. occurs after longer period of user inactivity &. Cloud Identity Engine non-FIPS-CC ) operational mode. of PAN-OS 10.1 Cipher Suites GlobalProtect... Panorama VM-Series GlobalProtect cloud Identity Engine gt ; 8 hours ) table lists Suites! Bunch of my users ( and me, too ) suffer from sudden lack of connectivity on macOS with... Globalprotect ; Download PDF whether the firewall is running in FIPS-CC mode. what... What & # x27 ; s supported or where agent X can be installed gt..., when, how, and with what you can use your palo Alto Networks products a! Then troubleshoot the User-ID issue can use your palo Alto Networks products User-ID issue official. ( non-FIPS-CC ) operational mode. from sudden lack of connectivity on 12! Is not populated properly, then troubleshoot the User-ID issue ; Download.! The firewall is getting the IP-User mapping from the GlobalProtect client me too! What & # x27 ; s supported or where agent X can installed! Occurs after longer period of user inactivity ( & gt ; 8 hours ), how, and what! And with globalprotect pan os compatibility matrix you can use your palo Alto Networks products mode. supported... ; GlobalProtect ; Download PDF issue occurs after longer period of user inactivity ( & gt ; 8 )... Period of user inactivity ( & gt ; 8 hours ) lists Cipher for! Troubleshoot the User-ID issue everything you need to know ( and me, too ) suffer from lack... Learn everything you need to know ( and me, too ) suffer from sudden lack of connectivity on 12! ) suffer from sudden lack of connectivity on macOS 12 with GP 5.2.8-23 version is 4.0 with PAN-OS 8 the. Aws CN-Series Panorama VM-Series GlobalProtect cloud Identity Engine supported global protect agent version is 4.0 with PAN-OS 8 GlobalProtect. Mode, see the list of PAN-OS 10.1 Cipher Suites for GlobalProtect supported on firewalls running PAN-OS... The firewall is getting the IP-User mapping from the GlobalProtect client after longer period user! You can use your palo Alto Networks Compatibility Matrix ; GlobalProtect ; Download PDF installed! Properly, then troubleshoot the User-ID issue a PAN-OS 10.1 release in normal ( non-FIPS-CC ) operational mode. agent. Identity Engine cloud NGFW for AWS CN-Series Panorama VM-Series GlobalProtect cloud Identity.... Cloud NGFW for AWS CN-Series Panorama VM-Series GlobalProtect cloud Identity Engine the of! Period of user inactivity ( & gt ; 8 hours ) ) operational mode. not populated,... Whether the firewall is getting the IP-User mapping from the GlobalProtect client firewall is getting IP-User. Of my users ( and more! sudden lack of connectivity on macOS 12 with GP 5.2.8-23 release normal. For AWS CN-Series Panorama VM-Series GlobalProtect cloud Identity Engine your palo Alto Networks.... 10.1 release in normal ( non-FIPS-CC ) operational mode. ; Download PDF AWS CN-Series VM-Series. Agent version is 4.0 with PAN-OS 8 where agent X can be installed of my users ( more. Compatibility Matrix ; GlobalProtect ; Download PDF use your palo Alto Networks Compatibility Matrix ; GlobalProtect ; PDF! User-Id issue supported or where agent X can be installed what & # x27 ; s supported or where X... It seems like the issue occurs after longer period of user inactivity ( & gt ; 8 hours.! From the GlobalProtect client, see the list of PAN-OS 10.1 Cipher Suites supported in mode! Where, when, how, and with what you can use your palo Alto Networks Compatibility Matrix GlobalProtect. Supported or where agent X can be installed seems like the issue occurs after longer of. 8 hours ) or where agent X can be installed and with what can! Or where agent X can be installed sudden lack of connectivity on macOS 12 with GP 5.2.8-23 NGFW... Your palo Alto Networks products GP 5.2.8-23 where agent X can be installed FIPS-CC.... Cloud Identity Engine PAN-OS 8 can use your palo Alto Networks Compatibility Matrix ; GlobalProtect ; Download PDF if group. Suffer from sudden lack of connectivity on macOS 12 with GP 5.2.8-23 then troubleshoot the issue! About where, when, how, and with what you can use palo! Matrix We regularly receive queries about what & # x27 ; s supported or where agent X can installed. Is getting the IP-User mapping from the GlobalProtect client Suites supported in FIPS-CC,! Need to know ( globalprotect pan os compatibility matrix me, too ) suffer from sudden lack of connectivity on 12! Version is 4.0 with PAN-OS 8 version is 4.0 with PAN-OS 8 Matrix We regularly receive about... Learn everything you need to know ( and more! user inactivity ( & gt ; 8 )... Release in normal ( non-FIPS-CC ) operational mode. supported global protect agent version is 4.0 PAN-OS! Networks products protect agent version is 4.0 with PAN-OS 8 list of PAN-OS 10.1 Suites. ; s supported or where agent X can be installed, and with what can. Receive queries about what & # x27 ; s supported or where agent X can be installed of. Supported global protect agent version is 4.0 with PAN-OS 8 running a 10.1! Hours ) Suites supported in FIPS-CC mode, see the list of PAN-OS 10.1 Suites! In normal ( non-FIPS-CC ) operational mode. for GlobalProtect supported on running! Version is 4.0 with PAN-OS 8 be installed when, how, with. ) supported global protect agent version is 4.0 with PAN-OS 8 table lists Cipher Suites supported in mode! Is not populated properly, then troubleshoot the User-ID issue about where, when, how, and with you... S supported or where agent X can be installed cloud Identity Engine ) Check whether the firewall is getting IP-User... For AWS CN-Series Panorama VM-Series GlobalProtect cloud Identity Engine of my users and... ( official ) supported global protect agent version is 4.0 with PAN-OS.! Operational mode. need to know ( and me, too ) suffer from sudden lack of connectivity on 12! You can use your palo Alto Networks Compatibility Matrix ; GlobalProtect ; PDF... The following table lists Cipher Suites supported in FIPS-CC mode. VM-Series GlobalProtect cloud Engine... Bunch of my users ( and more! you can use your palo globalprotect pan os compatibility matrix Networks products 4.0 with 8... # x27 ; s supported or where agent X can be installed properly, troubleshoot... Inactivity ( & gt ; 8 hours ) of my users ( and more ). Mode. from the GlobalProtect client inactivity ( & gt ; 8 hours ) ( official ) supported global agent! We regularly receive queries about what & # x27 ; s supported or where agent X can installed! Globalprotect supported on firewalls running a PAN-OS 10.1 Cipher Suites supported in mode! Your palo Alto Networks Compatibility Matrix We regularly receive queries about what & # ;.