Access Management via GP and Tunnel vpn ipsec

Metgatz — Wed, 14 Jul 2021 20:17:44 GMT

Good afternoon, I have a question, please support me. I have the following scenario.

Site 1: The main site as a Global Protect VPN concentrator and also as a central point of two IPSEC VPN tunnels.

Site 2: Site with Dynamic IP ( PPPoE ) connected by an IPSEC VPN tunnel to the central site. The Palo Alto MGT IP is on the same subnet as the LAN.

Site 3: Site with Dynamic IP ( PPPoE ) connected by an IPSEC VPN tunnel to the central site. The MGT IP of the Palo Alto site is in the same sub network as the LAN.

1.- Is it possible from the Global Protect VPN access on site 1, the main site, to reach via https the administration IPs of the other two Palo Alto sites?

2.- Also from the central site, from the LAN of the central site, I can reach the administration of the other two sites, via IPSEC tunnels.

Thank you very much, I remain attentive, best regards.

Re: Access Management via GP and Tunnel vpn ipsec

OtakarKlier — Wed, 14 Jul 2021 20:38:06 GMT

Hello,

Yes this should be possible with the following:

Routing - make sure the routes are correct for the lans on the other side of the VPN tunnel to the central site and vice versa.
Make sure the VPN tunnels are up
Make sure there are security policies in place to allow the traffic to flow.

Hope that helps.

Regards,

topic Access Management via GP and Tunnel vpn ipsec in General Topics

Access Management via GP and Tunnel vpn ipsec

Re: Access Management via GP and Tunnel vpn ipsec