https://live.paloaltonetworks.com/t5/globalprotect-discussions/documentation-on-global-protect/m-p/350026#M419 <P>Hello,</P><P>&nbsp;</P><P>I'm looking for documentation about Global Protect. The default help pages only summarize the menu options in the gui. Typically they contain no explanation about its context or purpose.</P><P>Examples of things I really can't intuitively find about global protect:</P><P>- Is it supported on an active/active firewall?&nbsp;</P><P>- Are there any documents with examples and bestpractices configuring such a scenario?</P><P>- More specific question right now: IP Pools for clients can be configured at two levels (client and gateway), but what is the difference and why/when would I choose between the two?</P><P>- Apparantly the IP Pools in the gateway config do not work with DHCP but with some kind of ill-described preferences?</P><P>- Do the firewalls sync the used IP addresses?</P><P>- Are the reservations synced? Documentation says the configuration is synced if the gateway is configure with a floating IP.</P><P>- Why do clients store Preferred IP addresses (up to 3) in the registry and use a fourth in the actual interface?</P><P>- Why does the registry contain references to multiple Portal configs if we only have 1 portal? It's not explained and from a admin perspective only one active config would make sense.</P><P>&nbsp;</P><P>Please advise.</P> Thu, 17 Sep 2020 10:36:59 GMT Klaverblad 2020-09-17T10:36:59Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/documentation-on-global-protect/m-p/350026#M419 <P>Hello,</P><P>&nbsp;</P><P>I'm looking for documentation about Global Protect. The default help pages only summarize the menu options in the gui. Typically they contain no explanation about its context or purpose.</P><P>Examples of things I really can't intuitively find about global protect:</P><P>- Is it supported on an active/active firewall?&nbsp;</P><P>- Are there any documents with examples and bestpractices configuring such a scenario?</P><P>- More specific question right now: IP Pools for clients can be configured at two levels (client and gateway), but what is the difference and why/when would I choose between the two?</P><P>- Apparantly the IP Pools in the gateway config do not work with DHCP but with some kind of ill-described preferences?</P><P>- Do the firewalls sync the used IP addresses?</P><P>- Are the reservations synced? Documentation says the configuration is synced if the gateway is configure with a floating IP.</P><P>- Why do clients store Preferred IP addresses (up to 3) in the registry and use a fourth in the actual interface?</P><P>- Why does the registry contain references to multiple Portal configs if we only have 1 portal? It's not explained and from a admin perspective only one active config would make sense.</P><P>&nbsp;</P><P>Please advise.</P> Thu, 17 Sep 2020 10:36:59 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/documentation-on-global-protect/m-p/350026#M419 Klaverblad 2020-09-17T10:36:59Z