Disable VPN services: Portals and Gateways

[S.Nguyen216298]

Hi Guys,

I am newbie with PAN world. My Company don't use VPN. And I just want to disable VPN service. I my PA i see Portals and Gateway have been config.

- Portals: I already disable login page

- Gateways: Don't change anything.

My way to disable VPN is right or wrong. Do I need to remove all setting on Portal and Gateways to make sure VPN already off? Because I just disable the portal login page.

Current setting my PA.

Hope guys can help me. Thank a lot and have a nice day.

[JayGolf · Accepted solution]

Hi @S.Nguyen216298 ,

Welcome! Do you foresee yourself reenabling VPN access in the near future? If so, disabling the portal as you have configured works just fine. If your looking to have GlobalProtect disabled for a longer period of time, be aware that disabling the portal doesn't stop GlobalProtect Agents' access to the portal. In order to do that, you can disable the security policy that is responsible for access to your portal/gateway. You could also remove DNS entry for your portal as well to save on your SSL cert.

[S.Nguyen216298]

Thanks, JayGolf,

Because it is setup by old guys, and as a newbie can you show some pic example how to check and identify "the security policy that is responsible for access to your portal/gateway". It will be very helpful for me.

[JayGolf]

My pleasure @S.Nguyen216298 ! I shall send you a PM so we can exchange config details.

[arusharma · Accepted solution]

Hi,

If you dont use VPN gateway you can simply remove the configuration from the firewalls that way there will be no listening IP:port on the firewall.

[S.Nguyen216298]

Hi Guys,

Thank you for the helping, now I already fix the problem.

Because my Company don't use VPN anymore, so I remove gateway config to stop. follow @arusharma way.