topic Re: Global protect portal - No login enforced in GlobalProtect Discussions

Global protect portal - No login enforced

ceapen01 — Fri, 24 Sep 2021 09:37:18 GMT

https://publicIP/global-protect/getsoftwarepage.esp

This portal is available now publicly even without login. Anyone can access the portal without login and download the client.

Is it possible to restrict this page to login users only.

Re: Global protect portal - No login enforced

BPry — Sun, 26 Sep 2021 03:55:53 GMT

@ceapen01,

To the best of my knowledge this has never actually been a restricted page through any of the PAN-OS releases. You can report it to PAN and put in a feature request to have it be an authenticated page since it technically could be viewed as a DoS risk if someone started making you serve a ton of download requests.

Re: Global protect portal - No login enforced

laurence64 — Wed, 29 Sep 2021 01:08:22 GMT

It would be better I think if it was configurable, our portal is internal only and the page is still open to the world.