topic Re: Global Protect Multiple URLS for Internal and External users in General Topics

Global Protect Multiple URLS for Internal and External users

FWPalolearner — Mon, 31 Aug 2020 09:34:49 GMT

Hello team ,

I have a GP cluster Gateway and Portal .

Currently we are using a single URL : vpn.abc.com for both Internal and External users .

Now we want to use another URL for External : Partner.abc.com

so do we need to create a new Portal and Gateway ? Remember we will still be using the same Public IP address which is for Internal users

because partner.abc.com comes from same path / It us just that Host DNS will be changed for URL

So do we need :

2 Portal - One for Internal and One for External -with different loopbacks

2 Gateways - with different loopbacks

Re: Global Protect Multiple URLS for Internal and External users

BPry — Tue, 01 Sep 2020 00:14:34 GMT

@FWPalolearner,

Lets back up a little bit first. What are you actually trying to achieve with this configuration?

Are you just trying to get the external users a different FQDN to use? Do you want to isolate the Partners from your normal users? Are you trying to drop your partners into a different security zone?

What you are describing is an incredibly easy way to spin up an isolated instance for your partners. That might not actually be needed though depending on what you are actually looking to do.

Re: Global Protect Multiple URLS for Internal and External users

FWPalolearner — Tue, 01 Sep 2020 08:25:23 GMT

@BPry Thanks for replying and providing feedback

requirement is to have a separate GP Portal ( URL) for Partners- using the same Public IP (

There is only 1 Public IP address)

which is currently being used /

For eg : currently the URL being used for GP Portal and GP gateway is vpn.customer.be ( common for all)

The requirement is to have to different URLS

Vpn.external.customer.be

Vpn .internal.customer.be

currently a single GP subnet 192.168.10.0/24 is being used by both internal and external

Goal is

When External user logs in to external URL ; He gets IP from 192.168.1.0/26 with a new External_VPN Zone

When Internal user logs in to external URL ; He gets IP from 192.168.1.128/2 with a new Internal_VPN Zone

In this case do we have to create a new GP Portal with new loopback interface and new GP Gateway with new loopback is needed ?

Re: Global Protect Multiple URLS for Internal and External users

FWPalolearner — Tue, 01 Sep 2020 08:28:14 GMT

Corrections from my previous post

When External user logs in to external URL ; He gets IP from 192.168.10.0/26 with a new External_VPN Zone

When Internal user logs in to external URL ; He gets IP from 192.168.10.128/26 with a new Internal_VPN Zone