GlobalProtect review

Palo Alto Networks’ homepage does not describe GlobalProtect by name or identify it as a VPN. It promotes the company’s broader security portfolio, including AI-powered network security and securing work on any device. The published pricing information describes GlobalProtect as VPN access for Windows and macOS, included with Palo Alto Networks firewalls at the base level. A separate subscription is available, with pricing quoted per firewall appliance or model.

That makes GlobalProtect a firewall-linked remote-access option, rather than a standalone product with a clearly published price and capacity. A Reddit thread about migrating from Cisco AnyConnect discusses machine-based and always-on VPN use, but those are user reports, not a complete product specification. Palo Alto’s homepage also describes related network security, Zero Trust, SASE and threat-response offerings; it does not establish that every capability is included with GlobalProtect.

The clearest case for GlobalProtect is an organization already using Palo Alto Networks firewalls. According to the published pricing information, basic Windows and macOS VPN access is included with a firewall, while organizations needing subscription features can request a quote. Evaluation licenses are available on request. That may make it worth considering if you want remote access tied to an existing Palo Alto setup, rather than introducing a separate vendor.

Palo Alto’s homepage describes the broader Strata network security platform as built for Zero Trust and able to prevent sophisticated threats in real time. It also promotes AI-powered threat monitoring, SASE security and automation for threat detection and response. These are portfolio-level claims, not a list of GlobalProtect features.

Some commenters on Reddit report successful machine-certificate, pre-logon tunnels and deployments across large fleets. One user said the client worked well after configuration issues were resolved. Those reports suggest it can fit managed enterprise environments, but they are anecdotes, not a guarantee of easy deployment.

The biggest buying problem is price opacity. Monthly and annual prices are not published on the vendor's site; subscriptions are quoted per firewall appliance or model. Capacity depends on the appliance, but no numeric user or throughput caps are published here. That makes it hard to compare costs or confirm fit before speaking with sales or a reseller.

Setup can also take work. In one Reddit thread, a customer described a multi-month configuration process before getting the system working; other comments describe the client as functional but not lightweight or suitable for every access scenario. These are individual reports, not a measured failure rate.

Privacy depends on how the company routes traffic. Reddit commenters explain that full-tunnel traffic goes through the company firewall and may be logged there; with split tunneling, DNS queries or hostnames may still be visible. That is not evidence that the app monitors activity while disconnected, but users should ask IT how their connection is configured. A separate thread reports connection problems with specific Windows app builds that Palo Alto later removed, so version stability is worth checking.

GlobalProtect has no published monthly or annual price in the published pricing information, which is marked low confidence and was checked on November 6, 2026. The base option is described as included with a Palo Alto Networks firewall for basic Windows and macOS VPN access. Its capacity depends on the firewall appliance, so “included” does not mean a standalone, unlimited VPN plan.

The GlobalProtect Subscription is quoted per firewall appliance or model. Evaluation licenses are available on request, but no subscription price or included capacity is published. There is no reliable tier-to-tier price jump to calculate, and the published pricing data lists no add-on prices. It marks a free plan, but the details describe the base access as bundled with a firewall—not as a separate free plan anyone can buy. Check the appliance model, capacity and subscription requirements with Palo Alto Networks or a reseller before comparing costs; the bill is not stated as a per-user rate.

The published material does not document migration tools, configuration imports, data exports or a step-by-step cutover process. We can’t put a reliable effort estimate on switching in either direction. What is clear is that the base option is tied to a Palo Alto Networks firewall, and capacity depends on the appliance. That makes firewall ownership and model requirements central questions before you move users over or plan to leave.

The review verdict flags GlobalProtect as a poor fit for teams seeking a lightweight third-party client or simple setup. Those are practical reasons to compare alternatives, not documented reports of why customers leave. The published material includes no Reddit posts or comments, so we can’t substantiate recurring user complaints or claim that a particular migration problem is common. Ask Palo Alto Networks or your reseller what configuration and user data can be exported, and confirm what must be rebuilt if you switch.