https://live.paloaltonetworks.com/t5/general-topics/globalprotect-for-specific-location/m-p/560952#M113695 <P>there's 2 options:</P> <P>&nbsp;</P> <P>you can configure the portal to only serve external gateways for those 2 source countries</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="2023-10-09_14-31-16.png" style="width: 492px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/54232iCE1B5555BF4C3650/image-dimensions/492x478?v=v2" width="492" height="478" role="button" title="2023-10-09_14-31-16.png" alt="2023-10-09_14-31-16.png" /></span></P> <P>and you can add security rules to only allow ssl, globalprotect and ipsec to your gateway ip for specific source countries</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="2023-10-09_14-32-56.png" style="width: 999px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/54233i3A80BC5C5829B8CC/image-size/large?v=v2&amp;px=999" role="button" title="2023-10-09_14-32-56.png" alt="2023-10-09_14-32-56.png" /></span></P> Mon, 09 Oct 2023 12:33:54 GMT reaper 2023-10-09T12:33:54Z https://live.paloaltonetworks.com/t5/general-topics/globalprotect-for-specific-location/m-p/560934#M113694 <P>Hi All,</P> <P>We have a requirement to configure Global Protect should be used only from 2 countries. For example, if users are in India and SriLanka only those people should connect to GP. Any other countries should not be able to connect even they are genuine users.</P> <P>&nbsp;</P> <P>Is there any way i can configure this using Geolocation option? Is this achievable?&nbsp;</P> <P>Regards,</P> <P>Sanjay S</P> Mon, 09 Oct 2023 09:34:37 GMT https://live.paloaltonetworks.com/t5/general-topics/globalprotect-for-specific-location/m-p/560934#M113694 Sanjay_Ramaiah 2023-10-09T09:34:37Z https://live.paloaltonetworks.com/t5/general-topics/globalprotect-for-specific-location/m-p/560952#M113695 <P>there's 2 options:</P> <P>&nbsp;</P> <P>you can configure the portal to only serve external gateways for those 2 source countries</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="2023-10-09_14-31-16.png" style="width: 492px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/54232iCE1B5555BF4C3650/image-dimensions/492x478?v=v2" width="492" height="478" role="button" title="2023-10-09_14-31-16.png" alt="2023-10-09_14-31-16.png" /></span></P> <P>and you can add security rules to only allow ssl, globalprotect and ipsec to your gateway ip for specific source countries</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="2023-10-09_14-32-56.png" style="width: 999px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/54233i3A80BC5C5829B8CC/image-size/large?v=v2&amp;px=999" role="button" title="2023-10-09_14-32-56.png" alt="2023-10-09_14-32-56.png" /></span></P> Mon, 09 Oct 2023 12:33:54 GMT https://live.paloaltonetworks.com/t5/general-topics/globalprotect-for-specific-location/m-p/560952#M113695 reaper 2023-10-09T12:33:54Z https://live.paloaltonetworks.com/t5/general-topics/globalprotect-for-specific-location/m-p/561100#M113713 <P><a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/7608">@reaper</a>&nbsp;I got the exact answer to my point. Thanks a lot.</P> <P>&nbsp;</P> Tue, 10 Oct 2023 11:23:08 GMT https://live.paloaltonetworks.com/t5/general-topics/globalprotect-for-specific-location/m-p/561100#M113713 Sanjay_Ramaiah 2023-10-10T11:23:08Z