Global protect question

[clyde.franklin]

I've seen multiple videos on global protect and need clarification. My first question is do you need to configure a static route on virtual router? Second quezon is to you need to configure NAT? Tutorial I've seen sometimes so these configurations some don't.

[reaper · Accepted solution]

Hi Clyde

Purely technically your device does not need to be configured with a default route nor NAT

If your device is set up with appropriate subnet routes or PolicyBasedForwarding to make sure traffic is returned to the appropriate segment, a default gateway can be left blank, although this would be an uncommon setup (most deployments will have a default gateway at least as a form of fallback)

If your GP connections will only be allowed access to internal resources (local web-access vs through the gateway), NAT is also not necessary

if you could add some details about the deployment you might be considering, we can provide more feedback

[clyde.franklin]

Thank you very much for response. I actaully testing last night for internal only adn it worked great w/o NAT. Thanks for answering my question