Global protect Query

ArunKumar7 — Thu, 22 Feb 2024 06:42:47 GMT

Hi All,

I am new to Palo Alto and I am doing SSL VPN(Global Protect).
I am a little confused about the Portals and Gateway, as I can see almost the same config on portal and gateway.,

What is the actual difference between the portals and Gateway?Thanks in advance.

Re: Global protect Query

TomYoung — Thu, 22 Feb 2024 11:30:10 GMT

Hi @ArunKumar7 ,

That is a good question. Here are the details:

GlobalProtect Portal:

Performs the initial authentication of a client.
Downloads/upgrades the GlobalProtect Client (Windows and MacOS).
Pushes configuration to the client.
Performs a Host Information Profile (HIP) check (if configured and licensed).
Provides a list of GlobalProtect Gateways.

GlobalProtect Gateway:

Authenticates GlobalProtect users.
Creates/maintains the VPN tunnels (SSL or IPsec) for user traffic.
Assigns IP addresses to users.
Generates HIP reports (if configured and licensed).

https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/globalprotect-overview/about-the-globalprotect-components

The portal is actually a nice way to perform RA VPN load balancing across regions. The GP client connects to the gateway with the least latency and highest priority (combination). Your users only need to know 1 portal URL and can automatically connect to the appropriate gateway.

Thanks,

Tom

Re: Global protect Query

ArunKumar7 — Thu, 22 Feb 2024 16:32:15 GMT

Thanks for the reply Tom.

But I can see authentication is available in both portal and gateway?

topic Re: Global protect Query in GlobalProtect Discussions

Global protect Query

Re: Global protect Query

Re: Global protect Query