topic Re: How to disable global protect portal exposure in public in General Topics

How to disable global protect portal exposure in public

afiq — Wed, 10 Jul 2013 03:30:32 GMT

HI all,

it.s that any way I could disable the global protect portal pages exposure in public? Could I just manually install the global protect client to the pc and get the ssl VPN feature works?

Re: How to disable global protect portal exposure in public

UhMayYeah — Wed, 10 Jul 2013 04:25:33 GMT

Distributing GlobalProtect Agent

In Active Directory environments, the GlobalProtect Agent can also be distributed to end users, using

active directory group policy. AD Group policies allows administrators to modify Windows host computer

settings and software automatically. Refer to the article at http://support.microsoft.com/kb/816102 for

more information on how to use Group Policy to auto

Alternatively ,

PAN-OS 4.1.7 and later allows the agent to be hosted on an external server for download. This helps reduce

the load on the firewall when users connect to download the agent. This accomplished by using the following

operational mode commands

• set global-protect redirect on

• set global-protect redirect location < path on the external

server>

e.g. set global-protect redirect location http(s)://host/GP/

Ref

Re: How to disable global protect portal exposure in public

Retired Member — Wed, 10 Jul 2013 07:37:01 GMT

I think it is not possible to hide portal page.

is it ?

Re: How to disable global protect portal exposure in public

Gregoux — Wed, 10 Jul 2013 13:32:53 GMT

if you use a third party client vpn

you could use only the gateway,

and you could block the portal response http by management profile configuration

Re: How to disable global protect portal exposure in public

UhMayYeah — Thu, 11 Jul 2013 06:34:10 GMT

I second your opinion.

Re: How to disable global protect portal exposure in public

JoergK — Thu, 19 Dec 2013 16:40:33 GMT

I'm also very interested in a solution to disable a Portal's Response Page.
Assigning a Management Profile with disabled Response Pages doesn't work for me
My Portal is bound to a Loopback IF.
PAN-OS 5.0.9

Re: How to disable global protect portal exposure in public

Retired Member — Mon, 23 Dec 2013 09:25:50 GMT

Response page option in management profile has no affect with that portal.

When you enable global protect portal a web server is automaticly works with the interface of portal by port 443.

Response page option is used by Captive Portal.

Re: How to disable global protect portal exposure in public

stewart — Thu, 26 Dec 2013 00:42:39 GMT

You could restrict access by country code as a source address.

If your users travel in the US then you could limit access to that country code.

You could use a Dynamic DNS client on your users laptops. Then add that address to the firewall as a FQDN object.

This could also be helpful.

https://live.paloaltonetworks.com/docs/DOC-6068