GlobalProtect for Specific location

[Sanjay_Ramaiah]

Hi All,

We have a requirement to configure Global Protect should be used only from 2 countries. For example, if users are in India and SriLanka only those people should connect to GP. Any other countries should not be able to connect even they are genuine users.

Is there any way i can configure this using Geolocation option? Is this achievable? 

Regards,

Sanjay S

[reaper · Accepted solution]

there's 2 options:

you can configure the portal to only serve external gateways for those 2 source countries

and you can add security rules to only allow ssl, globalprotect and ipsec to your gateway ip for specific source countries

[Sanjay_Ramaiah]

@reaper I got the exact answer to my point. Thanks a lot.