VPN portal migration to Cloud

shubhamgupta — Fri, 24 Sep 2021 13:44:43 GMT

Hi Team

We have a GP portal vpn.example.com which is hosted on a physical NGFW where we use SAML for authentication.

Now we want to move it to cloud, hence we have to generate a new SAML for this portal IP with the FQDN vpn.example.com.

We want to use the same FQDN for GP portal on cloud. I am not sure about the IDP (SAML) side configuration but I believe they map the SAML file with FQDN/IP.

How do I proceed in this case if I want to test the new cloud GP portal setup because if I generate new SAML with this FQDN it will mess up my existing GP portal setup.

Please correct me if i am wrong.

Re: VPN portal migration to Cloud

BPry — Sun, 26 Sep 2021 03:40:44 GMT

@shubhamgupta,

You would need to look at your IDP and see how they actually handle the authentication on their side of things to see if the attempt coming from a new IP would actually matter. In some instances it would, but in others the IP that services the request has literally no bearing and its all handled via certificates.

topic VPN portal migration to Cloud in GlobalProtect Discussions

VPN portal migration to Cloud

Re: VPN portal migration to Cloud