topic Re: Palo Alto Global Protect in General Topics

Palo Alto Global Protect

D.Callahan — Fri, 03 Jan 2025 19:51:06 GMT

Hello.

I am looking to setup and use Palo Alto's Global Protect feature; The question I have is if I have only 1 egress port (WAN) port that is public-facing, can I setup my Global Protect on that egress port or do I need to use another port for egress and assign that port to both gateway and portal? Or can I use my one (egress) port to be a gateway and portal, while leading internal clients to the internet?

Thanks.

Re: Palo Alto Global Protect

D.Callahan — Mon, 06 Jan 2025 14:03:48 GMT

@olivia36mcdowell, Thank you for the help.

Re: Palo Alto Global Protect

BPry — Tue, 07 Jan 2025 23:03:26 GMT

@D.Callahan,

This works without any issue. You can continue to use your one untrust interface to host GlobalProtect's Portal/Gateway and continue to utilize it for egress for internal clients. This is a pretty typical, if not the most common, way of deploying GlobalProtect.