topic Re: Global protect question in General Topics

Global protect question

clyde.franklin — Sun, 10 Apr 2016 16:08:04 GMT

I've seen multiple videos on global protect and need clarification. My first question is do you need to configure a static route on virtual router? Second quezon is to you need to configure NAT? Tutorial I've seen sometimes so these configurations some don't.

Re: Global protect question

reaper — Mon, 11 Apr 2016 09:12:35 GMT

Hi Clyde

Purely technically your device does not need to be configured with a default route nor NAT

If your device is set up with appropriate subnet routes or PolicyBasedForwarding to make sure traffic is returned to the appropriate segment, a default gateway can be left blank, although this would be an uncommon setup (most deployments will have a default gateway at least as a form of fallback)

If your GP connections will only be allowed access to internal resources (local web-access vs through the gateway), NAT is also not necessary

if you could add some details about the deployment you might be considering, we can provide more feedback

Re: Global protect question

clyde.franklin — Mon, 11 Apr 2016 13:51:28 GMT

Thank you very much for response. I actaully testing last night for internal only adn it worked great w/o NAT. Thanks for answering my question