https://live.paloaltonetworks.com/t5/general-topics/looking-for-documentation-on-how-to-set-up-an-internal-gp/m-p/1256616#M126620 <P>This is a PA environment I have inherited and I don't have a PA background, most everything was already set up....I just maintain security rules, NAT, etc....basic stuff.&nbsp;</P> <P>&nbsp;</P> <P>Been having quite a time with our Macs and User-ID through Active Directory and using the App-ID Agent on a server. After a few cases and frustrated users, think we need to pivot to an internal GP gateway for user ID.&nbsp;</P> <P>&nbsp;</P> <P>I don't know if I should take my existing GP portal that is set on a loopback address to include internal detection, or set up a new one with my LAN interface? Do I need to set my GP DNS name internally to point to an IP on my PA-1410? How do I make this seamless to the users so they don't have to log into GP client on their machine?&nbsp;</P> <P>&nbsp;</P> <P>In looking at some links on here as well as through other searches, I didn't find anything that really jumped out at me that matches what we are trying to accomplish. I'm hoping that someone can nudge me in the right direction.</P> <P>&nbsp;</P> Thu, 18 Jun 2026 01:58:56 GMT inSync-MarkValpreda 2026-06-18T01:58:56Z https://live.paloaltonetworks.com/t5/general-topics/looking-for-documentation-on-how-to-set-up-an-internal-gp/m-p/1256616#M126620 <P>This is a PA environment I have inherited and I don't have a PA background, most everything was already set up....I just maintain security rules, NAT, etc....basic stuff.&nbsp;</P> <P>&nbsp;</P> <P>Been having quite a time with our Macs and User-ID through Active Directory and using the App-ID Agent on a server. After a few cases and frustrated users, think we need to pivot to an internal GP gateway for user ID.&nbsp;</P> <P>&nbsp;</P> <P>I don't know if I should take my existing GP portal that is set on a loopback address to include internal detection, or set up a new one with my LAN interface? Do I need to set my GP DNS name internally to point to an IP on my PA-1410? How do I make this seamless to the users so they don't have to log into GP client on their machine?&nbsp;</P> <P>&nbsp;</P> <P>In looking at some links on here as well as through other searches, I didn't find anything that really jumped out at me that matches what we are trying to accomplish. I'm hoping that someone can nudge me in the right direction.</P> <P>&nbsp;</P> Thu, 18 Jun 2026 01:58:56 GMT https://live.paloaltonetworks.com/t5/general-topics/looking-for-documentation-on-how-to-set-up-an-internal-gp/m-p/1256616#M126620 inSync-MarkValpreda 2026-06-18T01:58:56Z