topic Re: [Global Protect][Clientless VPN][Automatic authentication] in GlobalProtect Discussions

[Global Protect][Clientless VPN][Automatic authentication]

NajibBakir — Thu, 14 Oct 2021 08:11:02 GMT

Hello community, can I set up the GlobalProtect VPN clientless to connect and authenticate automatically without human intervention? Actually, I have a web server on which my website is hosted, and I'd like it to communicate with my branch's local server via global Protect. I put my VPN's public IP address in the script, but it doesn't work, I believe it requires authentication to access the portal.

Is there any script that I can use to authenticate and connect to global Protect in the code of my website?

Thanks in advance.

Re: [Global Protect][Clientless VPN][Automatic authentication]

nikoolayy1 — Sun, 17 Oct 2021 11:57:53 GMT

Try using SSL client authentication:

https://docs.paloaltonetworks.com/globalprotect/8-1/globalprotect-admin/globalprotect-clientless-vpn/configure-clientless-vpn

Also still even with username and pasword you can make your script to fill in the portal web form but you have to play with html forms and parameters. Also if the server where the script is placed is domain joined maybe NTLM or Kerberos can help:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm2uCAC&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

https://docs-new.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/user-identification/device-user-identification-user-mapping/user-id-agent-setup/user-id-agent-setup-ntlm.html

Re: [Global Protect][Clientless VPN][Automatic authentication]

NajibBakir — Wed, 20 Oct 2021 10:47:20 GMT

Hi Nikolay_Dimitrov,

Thanks for your reply.

"but you have to play with html forms and parameters" ==>:This is exactly what I was looking for, and my question is whether Paloalto has a standard script (for web, android or IOS ..) that automates the authentication process for VPN clientless.

Thanks in advance

Re: [Global Protect][Clientless VPN][Automatic authentication]

nikoolayy1 — Wed, 20 Oct 2021 11:12:38 GMT

I personally don't have such script but you can also check with the Palo Alto TAC support as they in many cases offer help with such scripts.

Re: [Global Protect][Clientless VPN][Automatic authentication]

NajibBakir — Mon, 25 Oct 2021 08:19:13 GMT

HI Nikolay

Good day

thanks for your reply,I'll go ahead and open a Ticket 🙂