ASK: GP with 2 network access

L1 Bithead

ASK: GP with 2 network access

Hi All,

Anyone have tried to create 2 network access within PAN-GP on PANOS 6.1?

So, basically I want to create 2 PAN-GP Profile, one with split-tunnel, another one without split tunnel.

 

Already read some article, said that I'll need PAN-GP license and 2 External IP.

So, have someone tried this? Thanks in advance

Community Manager

Re: ASK: GP with 2 network access

you won't need the license if you're on PAN-OS 7.0 or later : About GlobalProtect Licenses

 

you'll need 2 gateways if you want your users to be able to switch between split/non-split manually, but if you want to base the split/non-split on user group membership (eg. users dont get split, admins and support staff get split) you can simply add 2 'Client Settings' profiles in the gateway and set a usergroup for each

or you can have each gateway act for a specific user group, if you want to add additional features to each gateway (MFO, SSO, always-on, HIP, ...)

 

 


Help the community: Like helpful comments and mark solutions
Reaper out
L1 Bithead

Re: ASK: GP with 2 network access

Hi Reaper, thank you for your advise.

I'm using PAN-OS 6.1, and currently i only have CLI access instead GUI. With CLI access, in 6.1, i can't create two clients, hehe .. but let me try your advise, and update here once resolved.

Once again, thank you

L1 Bithead

Re: ASK: GP with 2 network access

Confirmed. PANOS 6.1 has a limitation with multiple 'profile' at Global Protect. Started with PANOS 7.0.1, GP support multiple 'profile' at their Global Protect

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!