topic Re: RA VPN - SAML testing without affecting production in General Topics

RA VPN - SAML testing without affecting production

moragusa27 — Mon, 24 Jan 2022 19:41:39 GMT

Is there a way to test SAML authentication for Remote Access without affecting the production environment? In FortiGate I can create multiple independent portals and assign specific users/groups to the portals, but not sure if it is possible in PA. I am a bit concerned about having to ask for long maintenance windows in order to making SAML authentication works, and would be great if there would be an option to test this without bothering the users. Thanks.

Re: RA VPN - SAML testing without affecting production

BPry — Tue, 25 Jan 2022 00:18:32 GMT

@moragusa27,

You can create multiple GlobalProtect Portal/Gateway configurations without any issue and just assign it the new Authentication Profile.

Re: RA VPN - SAML testing without affecting production

moragusa27 — Tue, 25 Jan 2022 08:41:54 GMT

@BPry,

Yes, I have tried that but it looks like these Portas/Gateways cannot be working at the same time. I mean, I cannot specify the same Outside interface and same IP adress for the new Gateway/Portals.

Is it possible to have multiple Portals/Gateways enabled at the same time on the same interface/IP? Or should I decide to enable onle one? Thanks.

Re: RA VPN - SAML testing without affecting production

BPry — Tue, 25 Jan 2022 14:08:02 GMT

@moragusa27,

You can build it out by just using loopback interfaces, you don't need to utilize the actual interface address to built these out.

Re: RA VPN - SAML testing without affecting production

moragusa27 — Wed, 26 Jan 2022 20:50:19 GMT

Thanks, it has worked fine for me.