topic Re: GlobalProtect Portal hostname for client endpoints in General Topics

GlobalProtect Portal hostname for client endpoints

Drew-Gilman — Tue, 01 Oct 2019 21:27:08 GMT

Hello all,

I've been trying to find out if it's possible to assign a hostname to a portal so that clients' portal list on their workstations have hostnames rather than IP addresses. I work in an environment where IP address for different "sites" are similar, so it can be difficult for them to remember which IP goes to a site.

We have this functionality with Cisco ASA's by creating an XML document to attach as a profile for the Anyconnect clients.. Do PA's have this functionality?

I'm working with PA-220's and PA-220R's running 9.0.X.

Thanks.

Re: GlobalProtect Portal hostname for client endpoints

BPry — Wed, 02 Oct 2019 17:56:02 GMT

@Drew-Gilman,

So is my understanding correct that you don't have DNS entries for these IPs? If that's the case, the only way you can work around this is by utilizing the hosts file to map a hostname to the IP address; as the agent will then actually know where the traffic is actually supposed to go.

Re: GlobalProtect Portal hostname for client endpoints

OtakarKlier — Wed, 02 Oct 2019 18:47:20 GMT

Hello,

I would say utilize and IP space that does not overlap, then create your DNS entry. Then perhaps use the following to help you deploy/modify the client settings?

https://docs.paloaltonetworks.com/globalprotect/8-0/globalprotect-admin/globalprotect-clients/deploy-agent-settings-transparently.html#

Hope that helps.

Re: GlobalProtect Portal hostname for client endpoints

Drew-Gilman — Wed, 09 Oct 2019 14:01:45 GMT

Thank you both for your response!

That is correct, and we will not be purchasing domain's for these sites.

Hopefully, in newer versions of GP, they'll make it so you don't have to own a domain in order to nickname the portals in the session list...