GlobalProtect logs in PAN-OS offer a detailed, real-time view of your remote access environment's security and operational status. By logging every stage of the GlobalProtect connection lifecycle, these logs provide the necessary visibility to troubleshoot operational issues, audit user activity, and verify security policy enforcement. This chapter explains how to access and interpret GlobalProtect logs directly through the PAN-OS web interface.

You can use the GlobalProtect logs for:

• Troubleshooting: Identify and resolve user connection or performance issues.
• User Auditing: Track user activity for security reviews and compliance verification.
• Policy Enforcement: Confirm that security policies are being correctly applied to remote traffic.

These features are available for any Palo Alto Networks next-generation firewall deployed as a GlobalProtect gateway or portal.