ASK: GP with 2 network access

Showing results for 
Show  only  | Search instead for 
Did you mean: 

ASK: GP with 2 network access

L1 Bithead

Hi All,

Anyone have tried to create 2 network access within PAN-GP on PANOS 6.1?

So, basically I want to create 2 PAN-GP Profile, one with split-tunnel, another one without split tunnel.


Already read some article, said that I'll need PAN-GP license and 2 External IP.

So, have someone tried this? Thanks in advance


Cyber Elite
Cyber Elite

you won't need the license if you're on PAN-OS 7.0 or later : About GlobalProtect Licenses


you'll need 2 gateways if you want your users to be able to switch between split/non-split manually, but if you want to base the split/non-split on user group membership (eg. users dont get split, admins and support staff get split) you can simply add 2 'Client Settings' profiles in the gateway and set a usergroup for each

or you can have each gateway act for a specific user group, if you want to add additional features to each gateway (MFO, SSO, always-on, HIP, ...)



Tom Piens
PANgurus - SASE and Strata specialist; (co)managed services, VAR and consultancy

Hi Reaper, thank you for your advise.

I'm using PAN-OS 6.1, and currently i only have CLI access instead GUI. With CLI access, in 6.1, i can't create two clients, hehe .. but let me try your advise, and update here once resolved.

Once again, thank you

Confirmed. PANOS 6.1 has a limitation with multiple 'profile' at Global Protect. Started with PANOS 7.0.1, GP support multiple 'profile' at their Global Protect

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!