topic Re: Diffrent global protect client configuration in General Topics

Diffrent global protect client configuration

minow — Wed, 19 Jun 2013 08:32:55 GMT

Hey

we have a setup that the client have 3 diffrent type of users connecting with global protect, and all need different configuration

as i see it the only way is to configure 3 different portal for each user type

am i right?

Re: Diffrent global protect client configuration

SimmSimm — Wed, 19 Jun 2013 09:53:17 GMT

That depends on what makes your users different - you can set up different client settings for gateway choice / IPSec vs SSL etc based on username / group membership IF all your users authenticate to one source (Kerberos to AD for example), but if you need to use a completely different authentication method for your different user types then you probably do need a separate portal for each one.

Re: Diffrent global protect client configuration

VinceM — Wed, 19 Jun 2013 09:53:30 GMT

Hi,

Depend what you want if just need different access right, juste create policy per user / Groups and it's enough. Just one portal/Gateway with different client profile.

If you need to have different custom portal (logo ..) you need one IP per portal (then 3 gateway)

Re: Diffrent global protect client configuration

minow — Wed, 19 Jun 2013 09:57:50 GMT

i need

1) diffrent client configuration such as - "allways on" vs "on demand"

2) one type is a doamin laptop while other will user domain + token

3) we also want to use also different HIP profiles for each type

Re: Diffrent global protect client configuration

VinceM — Wed, 19 Jun 2013 10:07:26 GMT

Hi,

1) diffrent client configuration such as - "allways on" vs "on demand"

=> client profile OK

2) one type is a doamin laptop while other will user domain + token

=> client profile OK use authentication Sequence

3) we also want to use also different HIP profiles for each type

=> HIP profile are per Gateway then multiple gateway

Then your choice:

Multiple portal with one gateway per portal => Free no licence

One Portal with multiple gateway => need licence GP

Make your choice ...