Full control with GlobalProtect on-demand!

by ‎02-20-2017 08:53 AM - edited ‎05-11-2017 08:58 AM (1,234 Views)

No need to use Bothans to do anything for you. They die too easily anyway! GlobalProtect delivers security to any user, any device, anywhere.  Even to Bothans!

 

GlobalProtect network security for endpoints extends the protection of next-generation security to the mobile workforce in order to stop targeted cyberattacks, evasive application traffic, phishing, malicious websites, command-and-control traffic, and known and unknown threats.

 

Did you know there are 3 different connection methods with GlobalProtect?

 

As illustrated in the screenshots below you have user-logon,  pre-logon and on-demand.  Note that with PAN-OS 8.0 the location somewhat changed as reflected in the screenshots below.

 

Also note that with content release 590-3397 it's also possible to configure 'Pre-logon then On-demand' 

 

GP Connect MethodsGP Connect Methods

 

 

On-demand offers by far the most control as a user.  Using this connection method you decide when to connect or disconnect.

 

With this setting the GlobalProtect agent will not automatically connect to the gateway.  Instead, a menu item will be available for user to click to manually connect to or disconnect from the gateway.

 

If you want this level of flexibility but still be protected and feel secure then GlobalProtect On-demand is probably what you need!

 

Check out the following articles to get you up and running in no time:

 

https://live.paloaltonetworks.com/t5/Configuration-Articles/Basic-GlobalProtect-Configuration-with-O...

https://live.paloaltonetworks.com/t5/1-Submit-and-Collaborate/Certificate-config-for-GP-SSL-TLS-Clie...

 

Please post questions you would like to have answered, comments or suggestions below!

 

Cheers!

@kiwi

Ask Questions Get Answers Join the Live Community