Diffrent global protect client configuration

[minow]

Hey

we have a setup that the client have 3 diffrent type of users connecting with global protect, and all need different configuration

as i see it the only way is to configure 3 different portal for each user type

am i right?    

[SimmSimm]

That depends on what makes your users different - you can set up different client settings for gateway choice / IPSec vs SSL etc based on username / group membership IF all your users authenticate to one source (Kerberos to AD for example), but if you need to use a completely different authentication method for your different user types then you probably do need a separate portal for each one.

[VinceM]

Hi,

Depend what you want if just need different access right, juste create policy per user / Groups and it's enough. Just one portal/Gateway with different client profile.

If you need to have different custom portal (logo ..) you need one IP per portal (then 3 gateway)

V.

[minow]

i need

1) diffrent client configuration such as - "allways on" vs "on demand"

2) one type is a doamin laptop while other will user domain + token

3) we also want to use also different HIP profiles for each type

[VinceM]

Hi,

1) diffrent client configuration such as - "allways on" vs "on demand"

     => client profile OK

2) one type is a doamin laptop while other will user domain + token

     => client profile OK use authentication Sequence

3) we also want to use also different HIP profiles for each type

     => HIP profile are per Gateway then multiple gateway

Then your choice:

     Multiple portal with one gateway per portal => Free no licence

     One Portal with multiple gateway => need licence GP

Make your choice ...

v.