Restricting Global protect VPN access to specific countries

Reply
Highlighted
L2 Linker

Re: Restricting Global protect VPN access to specific countries

@TechnologySvcs , did you get this working?

 

I require this capability in a new GP deployment and would like to avoid putting another device upstream to restrict the portal and gateway access by region.

 

Thanks

L1 Bithead

Re: Restricting Global protect VPN access to specific countries

fyi, in my case it did not work at that time. I haven't tried again.

 

But i believe it is possible to restrict Global protect access to your public ip address using security policy rules.

 

Try creating two rules as mentioned below.

 

RULE1

--------

source zone : outside

source address : IN  (for eg. India, add required countries)

destination zone : outside

destination address :  x.x.x.x (your public ip) 

applications : panos-global-protect, panos-web-interface, ssl, 

service : application-default

action: allow

 

RULE2

--------

source zone : outside

source address : any

destination zone : outside

destination address :  x.x.x.x (your public ip) 

applications : panos-global-protect, panos-web-interface, ssl, 

service : application-default

action: deny

 

L7 Applicator

Re: Restricting Global protect VPN access to specific countries

@fwmike , Hi.

 

yes, gateway selection visa regions does work for both windoze and ios.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!