topic Global Protect - two portals same firewall in General Topics

Global Protect - two portals same firewall

paul1gilbert — Mon, 04 Dec 2017 19:02:54 GMT

Hello all,

Here is my question. Can I configure on the same firewall one global protect profile to only authenticate users based on certificates and a separate profile to authenticate users based on their AD credentials?

Currently I have authentication working with AD but I want to create a separate profile for certificate authentication. Each profile will be used for different set of users.

Is this possible?

How can I do that?

Re: Global Protect - two portals same firewall

Mick_Ball — Mon, 04 Dec 2017 20:11:21 GMT

I dont think you can, i have played with this and ended up creating 2 portals. Well 5 but for various reasons.....

the certificate auth applies to the entire portal.

It would have been good for users to auth via AD, Radius etc and then the auth profile used to then challenge for a cert if required.

so as far as i know, cert auth applies to the entire portal. You can of course have cert only or cert plus auth profile but not eva iva.

someone gladly correct me if i’m wrong on this...