topic Re: AWS GlobalProtect Configuration on VM-500 in VM-Series in the Public Cloud

AWS GlobalProtect Configuration on VM-500

fersherls — Tue, 22 Feb 2022 22:38:34 GMT

Hello LiveCommunity

I am currently trying to test GlobalProtect on my setup in AWS Cloud. However I have some doubts about the configuration of the Gateway.

In the GlobalProtect Gateway Configuration

The interface asked will be my "Outside" interface right? Asking that question because every video I have seen in the IPV4 configuration it lets you configure the /24 subnet of the interface but in my case this is a DHCP interface which it doesnt let me add any IP, I just have the "NONE" option there.

Am I doing something wrong in this step?

Also Im assuming this will be the gateway the users will use to put the IP in their browser so they can download the client to connect.

Best Regards!

Re: AWS GlobalProtect Configuration on VM-500

DanaHawkins — Thu, 24 Feb 2022 19:38:46 GMT

You will need to associate an AWS EIP (External IP) to the interface on that PAN that the GPGateway lives on. External users will connect to the EIP and be Nat'd to the DHCP address on the firewall. Even though the IP is DHCP it won't change as long as you don't terminate or detach the interface from the firewall.

Re: AWS GlobalProtect Configuration on VM-500

fersherls — Thu, 24 Feb 2022 21:58:02 GMT

Thank you! as you said I configure it anyways as it said None in the IPs but it worked.