AD Authentication GP Portal versus Gateway

MichaelMedwid — Fri, 01 Oct 2021 16:48:03 GMT

When setting up a portal or gateway there is a place to configure authentication - say with LDAP or other.
What is the relationship between the portal and gateway from the perspective of authentication?

Obviously you'd want users to just log in once.

Re: AD Authentication GP Portal versus Gateway

Mick_Ball — Fri, 01 Oct 2021 18:51:31 GMT

Hi Michael,

the gateways are the end point for a vpn connection, the portal is simply a front end for all of the settings available...

initially you connect to the portal, this configures your client and also lists available gateways for your vpn connection...

you have several options that can be set in the initial portal config.

you can cache username only or username and password to forward to the gateway.

you can generate an authentication cookie that is used to connect to the gateway.

you can use certificate authentication for both portal and gateway.

you can also use a combination of all the above.. as you may require cert auth for portal but ldap for gateway, this enables a second factor if required.....

there are more options available but that kinda sums it up...

topic AD Authentication GP Portal versus Gateway in GlobalProtect Discussions

AD Authentication GP Portal versus Gateway

Re: AD Authentication GP Portal versus Gateway