Foreign employee without a static IP

MatthewUber — Mon, 10 Apr 2023 15:39:46 GMT

I'm looking for alternative ways for a contractor to connect to Global Protect without clearing the region for access and not having to update the IP address on a daily basis.

Re: Foreign employee without a static IP

BPry — Mon, 10 Apr 2023 17:07:15 GMT

@MatthewUber,

Short of having them setup a dynamic dns service and allowing that FQDN object through a separate security rulebase entry, you'll need to at least allow the region access to the portal and gateway address. When it comes to the GlobalProtect client configuration, you can create a separate config for just this user in particular that allows the source region as connection criteria.

topic Re: Foreign employee without a static IP in GlobalProtect Discussions

Foreign employee without a static IP

Re: Foreign employee without a static IP