topic Re: VPN portal inside or external address in General Topics

VPN portal inside or external address

jdprovine — Wed, 10 Oct 2018 12:38:17 GMT

Is the VPN portal inside or external address

Re: VPN portal inside or external address

Brandon_Wertz — Wed, 10 Oct 2018 12:56:34 GMT

I think we need a bit more context, but typically external.

Re: VPN portal inside or external address

jdprovine — Thu, 11 Oct 2018 12:58:15 GMT

@Brandon_Wertz @reaper @BPry

External is what I thought. What information do you need? Is there away to verify that it is external?

Re: VPN portal inside or external address

Brandon_Wertz — Thu, 11 Oct 2018 15:51:52 GMT

Well in general the service GP provides the portal is going to be beyond/external of the internal side of the firewall.

Re: VPN portal inside or external address

jdprovine — Thu, 11 Oct 2018 16:11:50 GMT

@Brandon_Wertz

you mean most of the time the VPN is going to provide access for people outside of the internal network though be do have a use case of accessing a segrated portion of the internal network using GP , but aside from that one VPN instance most of our VPN users come from the internet/external access

Re: VPN portal inside or external address

AnalysisMan — Fri, 12 Oct 2018 00:48:10 GMT

The VPN portal should be an external IP address or FQDN since the users are located outside, and they use external DNS servers like 8.8.8.8, and TCP/443 is used for communication between GlobalProtect agents and Portals, or GlobalProtect agents and Gateways. Also, UDP/4501 is used for IPSec tunnel connections between the GlobalProtect agents and Gateways.