From 4668a7d9e306218bc3c959abf9a43486afef5a8e Mon Sep 17 00:00:00 2001
From: organiccrap <376317+organiccrap@users.noreply.github.com>
Date: Mon, 6 Apr 2020 05:48:27 +0800
Subject: [PATCH] GlobalProtect panel detection

---
 panels/globalprotect-panel.yaml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 panels/globalprotect-panel.yaml

diff --git a/panels/globalprotect-panel.yaml b/panels/globalprotect-panel.yaml
new file mode 100644
index 0000000000..e8c1d9a337
--- /dev/null
+++ b/panels/globalprotect-panel.yaml
@@ -0,0 +1,15 @@
+id: globalprotect-panel
+
+info:
+  name: PaloAlto Networks GlobalProtect Panel
+  author: organiccrap
+  severity: low
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/global-protect/login.esp"
+    matchers:
+      - type: word
+        words:
+          - "<title>GlobalProtect Portal</TITLE>"
\ No newline at end of file