GlobalProtect Login from Outside Canada

Subash Ghimire@iamsubashg

•updated Aug 20, 2025•2•0•95

This rule detects GlobalProtect VPN login attempts originating from outside of Canada. This can help identify potential unauthorized access or policy violations where users are expected to connect from specific geographic regions.