topic Re: Setup VPN Global Protect DynDNS in General Topics

Setup VPN Global Protect DynDNS

Metgatz — Fri, 09 Jul 2021 18:05:53 GMT

Setup VPN Global Protect DynDNS

Dear community:

Good afternoon, is it feasible to be able to configure VPN access with Global Protect, on a Palo Alto with the following scenario:

Palo Alto with:
-Public IP Dynamically ( DHCP )
-Firewall configured with the DynDNS service.
-FQDN provided by DynDNS ( vpnaccessgprotect.dynalias.net )

Please confirm if the Global Protect configuration with DynDNS services is feasible and supported.

Thank you very much to all, best regards

Re: Setup VPN Global Protect DynDNS

OtakarKlier — Fri, 09 Jul 2021 18:42:34 GMT

Hello,

While I havent done it, it should be possible, yes.

Regards,

Re: Setup VPN Global Protect DynDNS

Metgatz — Fri, 09 Jul 2021 20:11:08 GMT

@OtakarKlier

Hello, thank you very much for your reply.

One doubt, in the configuration of the GP Portal, in the Ipv4 Address parameter, where you normally put the Public IP, in my case I have a dynamic IP with DHCP (with DynDNS services) I will have to put "NONE".

I remain attentive, thank you very much, best regards

Re: Setup VPN Global Protect DynDNS

Remo — Fri, 09 Jul 2021 20:35:06 GMT

Yes, this is possible. I use it exactly like you are asking. In addition to that, I use my own dns domain where I have created a CN recort that points to the dyndns domain.

Re: Setup VPN Global Protect DynDNS

LAYER_8 — Mon, 12 Jul 2021 15:19:54 GMT

Yes, this is possible, and is how I use my Palo NGFW. The IPv4 GP Portal tab will show "NONE" if interface address is DHCP, this is expected behavior.

Here's an example configuration.