topic Re: GUI Access on Public IP in General Topics

GUI Access on Public IP

BPry — Fri, 24 Jun 2016 19:02:40 GMT

I'm setting up a PA-200 for a remote office and was wondering if anyone could tell me how I would restrict the GUI access on the Public IP to solely 1 range of public IP addresses. As it sits now I have access on any device as long as I have the password and username, I'm not sure if that is the normal default or not but it doesn't really sit well with me. Thanks for any help!

Re: GUI Access on Public IP

TranceforLife — Fri, 24 Jun 2016 19:13:19 GMT

Hi BPry,

You can create a management profile and allow specific IP address or subnet. Then apply it to the outside interface. See below:

Re: GUI Access on Public IP

BPry — Fri, 24 Jun 2016 19:16:15 GMT

Thanks! I actually just figured it out, didn't realize that it was allowed for everyone until I realized that my laptop wasn't on the wifi today.

Re: GUI Access on Public IP

snekkanti — Wed, 27 Feb 2019 03:19:20 GMT

I have configured 1/1 as untrust layer 3 interface with a public IP connected to home router. My management interface is configured as 192.168.18.100. How do I access the WebGUI of this PA-200 using https://192.168.18.100 from my office which is 10.231.x.x desktop IP. This PA-200 is used as IPsec tunnel from my home to on premise ASA.

Re: GUI Access on Public IP

Eptura — Fri, 08 Jul 2022 16:50:13 GMT

Hello, I can access my PA-300 device from internal network with private IP, but can't do it with external IP, the problem is only with HTTPs, SSH works fine

Re: GUI Access on Public IP

OtakarKlier — Fri, 08 Jul 2022 17:47:56 GMT

Hello @BPry ,

The other thing I so is put in a security Policy to only allow access via the whitelisted IP's.

Cheers!