Unable to Access Palo Alto Firewall via Public IP (Used as GlobalProtect Gateway)

ChiragChudasama — Mon, 26 May 2025 12:05:42 GMT

Hi all,

I'm facing an issue where I'm unable to access my Palo Alto firewall using its public (live) IP address. The same IP is configured as the GlobalProtect VPN gateway.

As soon as I set the live IP as the GlobalProtect gateway, I can no longer access the firewall's management interface via that IP. It was working before assigning it to GlobalProtect.

Is this expected behavior, or is there a workaround that would allow me to manage the firewall while also using the same public IP for GlobalProtect?

Any advice or configuration tips would be appreciated!

Thanks in advance,
Chirag Chudasama

Re: Unable to Access Palo Alto Firewall via Public IP (Used as GlobalProtect Gateway)

Raido_Rattameister — Mon, 26 May 2025 12:49:48 GMT

Palo changes management port to 4443 if GlobalProtect is enabled on same interface.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm8SCAS

It is highly advisable not to open management port to public Internet due security reasons.

topic Re: Unable to Access Palo Alto Firewall via Public IP (Used as GlobalProtect Gateway) in Next-Generation Firewall Discussions

Unable to Access Palo Alto Firewall via Public IP (Used as GlobalProtect Gateway)

Re: Unable to Access Palo Alto Firewall via Public IP (Used as GlobalProtect Gateway)