topic Re: Connect to Two Palo Alto VPNs in General Topics

Connect to Two Palo Alto VPNs

fhewiufhwefhwe — Thu, 30 Jan 2020 16:52:02 GMT

I have an employee who travels often with a need to simultaneously connect to two Global Protect VPNs, neither of which are clientless VPNs.

The first connection is to the main office.

The second connection is to another company, which has whitelisted our main office external ipaddress and that of our vpn ipaddress.

The second connection must be made after the first given the whitelist issue.

The employee also has a dynamic ipaddress, so it cannot be whitelisted.

How might I be able to accomplish this?

Re: Connect to Two Palo Alto VPNs

ZOlson618 — Thu, 30 Jan 2020 17:25:36 GMT

There is no way to accomplish this action. Remote access VPNs are meant to be used one at a time.

The only possible solution for this would be to connect to your primary VPN, remote desktop into a virtual machine in that network, then use that machine to kick off your second VPN.

Re: Connect to Two Palo Alto VPNs

fhewiufhwefhwe — Thu, 30 Jan 2020 17:57:57 GMT

That's what I figured. The executive refuses to do this however.

Re: Connect to Two Palo Alto VPNs

ZOlson618 — Thu, 30 Jan 2020 17:59:13 GMT

That's what they're paid to do, say no.

Re: Connect to Two Palo Alto VPNs

fhewiufhwefhwe — Thu, 30 Jan 2020 18:03:15 GMT

I hear you, but CEOs can still be demanding once in a while.

Re: Connect to Two Palo Alto VPNs

reaper — Thu, 30 Jan 2020 21:05:55 GMT

you can create a vpn between your office and the other company, then have your employee vpn into your HW and route/nat his connections (hub and spoke) over your office

it's rickety but it could work