topic Run NetConnect and Global Protect concurrently on 4.0.12 in General Topics

Run NetConnect and Global Protect concurrently on 4.0.12

LCMember1607 — Fri, 07 Jun 2013 19:25:27 GMT

I would like to run Global Protect and NetConnect on a 4.0.12 firewall.

I have domain users and vendors that I would like to address separately pushing the GP.msi through Group Policy to the domain users and then hand holding the vendors.

Then I could upgrade to 4.12.

I want to run both GP and NC at the same time on 4.0.12.

I see there is a trial license for the GP Gateway, seeing I have a pair in HA that is all I need, under Support/My Devices.

I am assuming I would activate the trial then download the GP Agent Bundle from the firewall to my system.

How do I get the GP agent if both use the same domain name to access?

Has anyone ever done this?

TIA

Re: Run NetConnect and Global Protect concurrently on 4.0.12

VinceM — Mon, 10 Jun 2013 12:00:39 GMT

Hi,

I think, maybe someone can confirmed that 4.0 still not supported by palo.

Running NetConnect and GP in same time on the same palo .... for me it's not possible ..; maybe I am wrong but ...

For running GP, you don't need to have licences. GP is not under licence for basic featture. Licence are only needed if you want to use either Host Checking or Multiple Gateway (or IOS / Androïd GP client)..

If you need GP, this docs can help: https://live.paloaltonetworks.com/docs/DOC-2904

Hope help.

Re: Run NetConnect and Global Protect concurrently on 4.0.12

pandragon — Tue, 11 Jun 2013 09:07:56 GMT

As far as I remember, we can't run GlobalProtect and NetConnect concurrently on same PA unit. But a PC can have both clients installed concurrently and either of them can connect to different PA units running either GP or NetConnect.

Re: Run NetConnect and Global Protect concurrently on 4.0.12

LCMember1607 — Wed, 12 Jun 2013 13:23:10 GMT

This can be done. Working with PAN support.