GlobalProtect

Name: GlobalProtect
Brand: Palo Alto Networks

Leader

The industry's most comprehensive AI security platform.

Est 2005|Valuation $302.9B|Raised $261.3M

LinkedIn 2.0M|Website|Web traffic 3.9M|FTEs 21,921|HQ Santa Clara, CA

Published Oct 15, 2026

01Common complaints

- Company sizes or stages where this product is overkill or insufficient - Small organizations without firewall expertise may find the operational overhead (gateway design, certificates, SAML, troubleshooting) disproportionate compared with simpler managed ZTNA services. - Industries or use cases where competitors are preferable - Highly distributed, cloud-first environments that want to prioritize user-to-application segmentation and minimize network-level access may prefer ZTNA-first products. - Technical requirements that this product may not meet without additional validation - If consistent IPv6/double-stack behavior across all endpoint OS versions is a strict requirement, validate behavior in a lab or pilot; administrators have reported IPv6 routing inconsistencies on certain macOS builds in community discussions. - Budget constraints that make alternatives more appropriate - If the organization does not already own Palo Alto firewalls, the effective cost of obtaining deep integration benefits may be higher than standalone ZTNA/SSE subscriptions. - Specific workflows or integrations where the product falls short - Teams that require highly transparent diagnostics, rapid root-cause workflows, and simple client troubleshooting may need to supplement GlobalProtect with additional logging practices or consider alternatives that emphasize digital experience monitoring. - Red flags in the buying process - If required features such as mobile support, HIP, clientless access, or advanced split tunneling trigger additional licensing that was not budgeted, the organization may experience unplanned scope and cost increases unless requirements are mapped to the license matrix early in procurement. - Current limitations acknowledged by the vendor - Vendor release notes and documentation list versioned behavior and known platform-specific cautions; this research pass did not include a consolidated vendor “known issues” bulletin. - Features on the roadmap (not yet available) - Roadmap details were not collected in this pass; buyers should request product roadmap information from the vendor during procurement. - Scale limitations (at what volume/size does it break down?) - No definitive public scalability ceiling was found in the retrieved sources; real-world scale is a function of gateway sizing, architecture, and network conditions. - Security or compliance gaps - Security vulnerabilities affecting GlobalProtect portal/gateway components have been reported, including authentication bypass and denial-of-service issues in recent advisories; organizations should include patch cadence and vulnerability management as core evaluation criteria. - Technical debt or architectural limitations mentioned in reviews - Peer-review commentary sometimes characterizes GlobalProtect as an established VPN approach rather than a cloud-native ZTNA-first platform, reflecting buyer expectations shaped by newer SSE/ZTNA products. - API limitations or integration constraints - API and integration constraints were not captured in the available materials; buyers should validate API capabilities during technical evaluation.

Deal disqualifiers: what makes a poor fit

Organizations seeking a fully cloud-native ZTNA model that avoids VPN tunnels by default.
Teams with limited capacity to manage frequent endpoint client updates and cross-OS compatibility testing.
Buyers that require highly transparent, self-serve pricing and a lightweight deployment without significant gateway or firewall configuration.

02Why they buy

- Competitive advantages validated by customer feedback (operational statements rather than vendor marketing) - Integration with Palo Alto firewall policy constructs and centralized logging is a consistent reason customers report selecting the product. - Granular access controls and posture enforcement are frequently cited as functional strengths when configured correctly in PAN-OS. - Unique features and capabilities relative to competitors - Many competing solutions offer posture checks and browser-based access; the practical differentiator for GlobalProtect is how those features integrate with PAN-OS policy, logging, and existing operational tooling. - Differentiation based on reviews - Reviews suggest GlobalProtect can be stable at scale in some enterprise deployments; however, outcomes vary, and variability itself should be considered a risk when evaluating alternatives. - Areas where competitors have advantages - ZTNA-first vendors often present a clearer architecture for replacing VPN tunnels with app-level segmentation and cloud-native control planes; organizations pursuing a VPN-less strategy may prefer those architectures.

03Field reports

- Review platform sentiment (quantitative indicators) - Gartner Peer Insights - Overall ratings available on the platform indicate generally positive sentiment with a mixture of ratings, including a distribution that contains lower scores as well as higher scores. - G2 - G2 reviews describe strengths such as secure remote access and granular controls and note dislikes including resource usage, connection stability, setup complexity, troubleshooting visibility, and compatibility issues. - Representative direct statements (positive, neutral, negative) - Positive/neutral feedback (peer review excerpts) - Reports of large-scale deployments operating without incident over extended periods have been recorded in individual peer reviews. - Several reviews cite tight integration with the vendor’s security controls as a reason for selection. - Negative feedback (peer review excerpts and community posts) - Some reviewers described connection and reliability problems in their operational environments. - Other comments noted client resource usage, update and compatibility challenges, and limited troubleshooting visibility. - Community commentary - Community forum posts include both strongly negative and positive operational reports; some administrators report stable operation after testing new builds, while others report specific compatibility issues that led to operational troubleshooting. - Common criticisms and complaints (cross-source themes) - Recurring themes across reviews and community posts include: - Connection reliability and stability variability across endpoints - Endpoint resource usage and performance impact - Complex initial setup when combining SAML/certificates, HIP checks, and split-tunnel configurations - Client update and operating-system compatibility issues - Limited troubleshooting visibility requiring detailed log collection and portal-side diagnostics - Why customers chose this product over alternatives - Integration with existing Palo Alto NGFW infrastructure and the ability to manage remote access through existing policy and operational constructs are common selection drivers. - Some organizations selected the product during periods of rapid remote-work expansion due to existing ecosystem fit and capacity to scale using known tooling. - Why some customers left for competitors (churn reasons) - Community comments suggest some organizations consider or migrate to alternatives when strategic goals emphasize cloud-native ZTNA architectures or when operational preferences favor different agent/connector models. Explicit, quantified churn case narratives were not present in the retrieved sources for this research pass. - Specific outcomes customers reported (when available) - Example reported scale - A peer review described a large-scale deployment supporting a substantial user base with continuous operation; this statement was not independently verified by this research pass.

Vendor case studies with quantified impact

This research pass did not identify vendor-published GlobalProtect case studies that included independently verifiable, quantified ROI metrics attributable to GlobalProtect alone.
Implication
- Buyers should request reference calls and validate vendor case-study claims against their own network topology, endpoint fleet, and authentication/posture design; many performance and stability outcomes are environment-dependent.

Mixed operational outcomes

Public community content documents both stable deployments and deployments with issues; these reports are anecdotal rather than controlled studies and should be treated as indicative rather than definitive.

04Best fit

Company sizes: specific employee counts and revenue ranges

Typical fit
- Mid-market to large enterprise with a managed IT/security team and established identity infrastructure.
- Evidence: vendor and peer reviews describe deployments supporting large user populations in some cases.

Industries and verticals where adoption is strongest (with customer examples)

GlobalProtect is used across many verticals; reviews indicate adoption in financial services and other regulated environments, reflecting cross-industry use where enterprises require integrated firewall and remote access controls.

Roles and personas: decision makers AND end users

Decision makers
- Network security architects
- IT security and risk management managers
- Network engineers and firewall administrators
End users
- Remote employees and contractors requiring consistent access
- Privileged administrators when GlobalProtect is used as a controlled access path into management networks

Pain points and challenges the product addresses

Secure remote connectivity managed through centralized policy
Device posture enforcement before granting access (when licensed and configured)
Centralized visibility into remote workforce traffic when integrated with firewall logging and monitoring

Qualification criteria: what makes a strong fit

Organizations that already operate Palo Alto NGFWs and want remote access governed by the same security policies and tooling.
Organizations that require VPN-style connectivity for legacy application patterns but plan to add posture checks and least-privilege controls incrementally.

05The pitch

What the product does (core value proposition in objective terms)

- GlobalProtect is Palo Alto Networks’ endpoint VPN / secure remote access client and infrastructure (portal + gateways) designed to extend enterprise network security policies to remote users and devices. It can be deployed with Palo Alto Networks next-generation firewalls (PAN-OS) and/or Prisma Access (cloud-delivered). - Key functional themes in Palo Alto’s positioning - Identity-aware remote access (user-based policy) - Device posture / “device trust” checks (HIP—Host Information Profile) - Consistent traffic inspection/policy enforcement for remote endpoints (often by steering traffic through PAN-OS capabilities)

Target market and market positioning

- Primary buyer profile is mid-market to enterprise organizations already operating Palo Alto Networks NGFWs (or considering Prisma Access/SASE) that need managed remote access at scale and that prefer integration with Palo Alto’s security stack. - Analyst and peer-review placements indicate GlobalProtect is evaluated alongside Security Service Edge / ZTNA-oriented solutions, and is considered alongside vendors such as Zscaler, Netskope, and Cisco Secure Client, not only traditional VPN products.

Get a comprehensive analysis of GlobalProtect including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →