topic Two Global protect Portals on one gateway - possible? in General Topics

Two Global protect Portals on one gateway - possible?

darren_g — Sun, 16 Nov 2014 22:46:08 GMT

Folks.

I have a need to implement certificate based login for most of our corporate PC's to Global protect - so they pre-login and get domain scripts etc when the remote users logon.

However, I also have a number of PC's which aren;t corporate owned (and, as such, I can't push certificates to) which still need to be able to login just using username/password interactive logins.

One suggestion I have had is to run two Portals on the one gateway - one configured to run pre-login with certificates, one configured to just wait for username/password.

Has anyone tried this? Is it even remotely possible? Can I run two portals on the same IP address with the different authentication methods?

Any insight appreciated. I'm trying to experiment, but I'm wary of doing it live if I can avoid it.

Thanks

Re: Two Global protect Portals on one gateway - possible?

hshah — Mon, 17 Nov 2014 04:54:24 GMT

Hi Darren,

Two Portal on one Firewall is possible, but you need to buy a license for GP portal.

Regards,

Hardik Shah

Re: Two Global protect Portals on one gateway - possible?

cpainchaud — Mon, 17 Nov 2014 08:35:31 GMT

Not on same IP. Each portal needs its own IP.

Re: Two Global protect Portals on one gateway - possible?

MarcoLeckel — Mon, 17 Nov 2014 12:12:49 GMT

Hi Hardik,

are you sure that you need a GP Portal License?

As far as i know you'll only need the Portal License when you configure

more than one external Gateway or internal Gateways.

It should be possible to configure two different Portals on one Firewall as long as they have different IPs.

If you have only one external IP you can configure Destination NAT for different Ports to internal Loopback IPs

Regards

Marco

Re: Two Global protect Portals on one gateway - possible?

HULK — Mon, 17 Nov 2014 13:30:55 GMT

Hello Marko,

FYI.

Reference DOC: GlobalProtect Configuration Tech Note --- Page No 3

Thanks

Re: Two Global protect Portals on one gateway - possible?

MarcoLeckel — Mon, 17 Nov 2014 13:35:08 GMT

Hi HULK,

is there anything different to my post?

Or do you just want to proof that i am right ? :smileylaugh:

Regards

Marco

Re: Two Global protect Portals on one gateway - possible?

HULK — Mon, 17 Nov 2014 13:37:50 GMT

Hello Marco , I just want to prove that you are right. ( With evidence) :smileylaugh:

Thanks

Re: Two Global protect Portals on one gateway - possible?

darren_g — Thu, 04 Dec 2014 00:47:08 GMT

Thanks. I'm attempting to get this to work on another interface.

Cheers.