topic Re: Selection of the GlobalProtect portal by users in General Topics

Selection of the GlobalProtect portal by users

informatiq — Thu, 20 Apr 2017 17:26:36 GMT

Hi !

We would like to install 2 GlobalProtect portals:

- one for the connection to the internal network since the outside with a VPN by using the GlobalProtect client ;

- one for the connection to the internal network with the GlobalProtect client, in premises of the company.

To make this configuration easy to use for user, we would to make the user click on the address/name of the portail in which he has to connect. For exemple he has to choose in a drop-down list the appropriate portal.

That option is it possible to set up ?

Regards

Re: Selection of the GlobalProtect portal by users

MangoTango — Thu, 20 Apr 2017 17:50:47 GMT

You can allow users to change the portal address but there is no portal list feature currently. You'll have to send a feature request to your Sales Engineer if ya want this. If you send the request; post the request number here so others can vote for it also through their SEs.

Re: Selection of the GlobalProtect portal by users

Raido_Rattameister — Thu, 20 Apr 2017 19:46:47 GMT

Think if you really need 2 portals.

Maybe you can get it working with 1 portal.

You can push multiple gateways from single portal.

In Portal config you can also do "Interenal Host Detection" so if user is inside company then GlobalProtect will connect to internal gateway.

Last option would be to set up DNS Proxy on Palo internal interface so if laptops resolve GlobalProtect portal address you have static entry in Palo DNS Proxy to give different ip compared to one that public DNS servers have.