topic Re: Paloalto support standard-based IPSec VPN Client ? in General Topics

Paloalto support standard-based IPSec VPN Client ?

EBSSupport — Thu, 09 Dec 2010 19:25:45 GMT

Is Paloalto support standard-based IPSec VPN Client ?

Re: Paloalto support standard-based IPSec VPN Client ?

dagibbs — Thu, 09 Dec 2010 20:39:51 GMT

Define "standard-based"?

The Palo Alto SSL VPN uses its own client - so you can't connect to it with, say, OpenSwan or OpenVPN or something similar. You need to install/use the Palo Alto client, which currently only supports Windows and Mac OSX at the moent (from memory).

Cheers.

Re: Paloalto support standard-based IPSec VPN Client ?

EBSSupport — Fri, 10 Dec 2010 02:46:23 GMT

The scenario is, my customer want to use IPAD to connect to internal network via Palo Alto VPN. I quite sure that NetConnect cannot be installed on iOS. Any I think IPAD has IPSEC client in it, so i just wondering if Palo Alto can support connection via such client (which doesn't seems so).

Thanks for your answer

Re: Paloalto support standard-based IPSec VPN Client ?

dagibbs — Fri, 10 Dec 2010 02:48:26 GMT

EBSSupport wrote:

Thanks for your answer

Nope. Been down that road myself. There's no VPN support for the iPad or iPhone currently, nor on the roadmap.

If you want it, make noise with your PA sales rep and have them forward a feature request to PA. If enough people ask for this feature, maybe it'll get over the line.

Cheers.

Re: Paloalto support standard-based IPSec VPN Client ?

mreynolds — Tue, 08 Mar 2011 22:13:13 GMT

Same issue has been raised here - I will be calling our Regional Rep to put in a formal request for the SSL Client. However, to speak to his question regarding the IPSec client on the IPAD... The client on the IPAD is unfortunately a true IPSec client. It is a Cisco AnyConnect IPSec client. That is why there is no mention of phase 1 or phase 2 hash or authentication techniques. It is unfortunate. I have looked through the App Store to see if there was a more generic IPSec client, but I haven't seen anything yet. Just keep pressure on to build the SSL Client - that would be more viable than the IPSec tunnel in any case. Hope that helps - or at least gives more insight...

Re: Paloalto support standard-based IPSec VPN Client ?

alliance — Thu, 27 Oct 2011 08:54:53 GMT

Hi,

Since it's now possible to connect a IPAD/Iphone with the CISCO VPN Client, what about the Cisco VPN ClienT on a laptop ?

Is it possible now to use the client on a laptop too?

Thanks for your answer

Regards,

Re: Paloalto support standard-based IPSec VPN Client ?

albertbruggeman — Wed, 02 May 2012 14:08:19 GMT

Yes it is.

You have to:

- enable X-Auth support in your Globalprotect Gateway settings, and define a Group name and password.

- add the Cisco VPN client in the Globalprotect portal, tab Client Configuration, 3rd party VPN window.

I tested the connection with a Cisco VPN Client (so ipsec) on a laptop. Works great.

Regards,

Albert