topic Re: x-auth support in GlobalProtect Discussions

x-auth support

AlainDesnoyers1 — Mon, 04 Jul 2022 16:26:32 GMT

I am trying to enable x-auth support on my Global Protect Gateway I configured and under Agent>Tunnel Settings , I do not have the "enable x-auth" option, only "enable IPSEC" IS this a GP licensing issue? I read the doc for that and it doesnt mention x-auth as one of the advanced features.

Thanks

Re: x-auth support

A_Astardzhiev — Thu, 07 Jul 2022 12:14:18 GMT

Hi @AlainDesnoyers1 ,

You don't need GlobalProtect license to use X-Auth.

What PanOS version are you running?

Check if you can see X-Auth related CLI commands available. Login to SSH -> enter config mode and search commands containing string "third-party"

user@myfw# find command keyword third-party show network tunnel global-protect-gateway <name> ipsec third-party-client set network tunnel global-protect-gateway <name> ipsec third-party-client set network tunnel global-protect-gateway <name> ipsec third-party-client enable <yes|no> set network tunnel global-protect-gateway <name> ipsec third-party-client group-name <value> set network tunnel global-protect-gateway <name> ipsec third-party-client group-password <value> set network tunnel global-protect-gateway <name> ipsec third-party-client rekey-noauth <yes|no> set global-protect global-protect-portal <name> client-config configs <name> third-party-vpn-clients [ <third-party-vpn-clients1> <third-party-vpn-clients2>... ]

Re: x-auth support

AlainDesnoyers1 — Fri, 15 Jul 2022 10:32:50 GMT

Ya tried that, looks like it's not available when running in FIPS mode and thats the mode I'm running in.