topic global protect connecting through third party in General Topics

global protect connecting through third party

HemanthV — Tue, 06 Nov 2018 09:00:59 GMT

HI Team

We have PANOS 8.0.10 running PA-820 Cluster and we have configured Global Protect on those firewalls.
Since Windows XP or 7 does not support for Global protect client,

we need to use Cisco Any Connect instead.

1). Can we use third-party VPN client to connect to the SSL VPN and which PANOS versions do it supports?
2). If possible, can you share us a configuration guide-line?
3). Do we need subscriptions for this?

Re: global protect connecting through third party

Venkatesan_radhakrishnan — Tue, 06 Nov 2018 14:28:18 GMT

Try to enable X-auth support and configure the group names.

It will act as phase 1 authentication for your clients and LDAP or local admin will be your phase 2 authentication to make global protect ipsec based connection.

Once the connection is established test the reachability, But here though you are using third party client features may be limited to the client.

Re: global protect connecting through third party

BPry — Tue, 06 Nov 2018 15:44:16 GMT

@HemanthV,

Not sure where you are getting that you can't use the GlobalProtect agent on Windows 7? Both Releases 4.0 and 4.1 continue to support Windows 7.