globalprotect key

[jdprovine]

When I install the globalprotect client on a pc I never have to enter a key, how and when does the key get passed

[BPry]

@jdprovine can you expand by what you mean by 'key'? 

[jdprovine]

security key like for cisco vpn client. There has to be a way for global protect to secure the connections

[jdprovine]

The first time you put in your password to connect, what keeps that from being clear text how is it encrypted. We have group name and password setup but that is no where on the client software that is installed on the pc

[KotreshaMC]

I hope its future of Global protect, check this configuration under 

Network->Gllbal protect->gateway->selcet gateway->agent->external gateway

check is it manuall or not?

[reaper]

GlobalProtect uses certificates to secure the connection, rather than a preshared key 🙂

[jdprovine]

so if you don't put on a cert then your connection is not secure

[reaper]

then the device's default certificates will be used 😉

[jdprovine]

you mean the portal configuration not the gateway configuration right?

[jdprovine]

We are using IPSec connections not ssl does that make a difference? My main concern is the first time then connect using the VPN that their password is encrypted and then does it download the key after the first connection

[reaper]

there's several bits and pieces to it, please check out this bit in the admin guide

hopefully it helps clarify what you're looking for

[reaper]

---

@jdprovine wrote:

We are using IPSec connections not ssl does that make a difference? My main concern is the first time then connect using the VPN that their password is encrypted and then does it download the key after the first connection

---

The first time you're going to set up an ssl connection, using the server certificate attached to the portal to get to the config file, all communication will always be encrypted (ssl uses, at the least, a server and client hello where encryption is negotiated and established before any user information is transmitted)

client to server will always be encrypted even before username and password are shared

[jdprovine]

First glance at the document not sure it answers my question but I will give it another look and see. 🙂

[jdprovine]

I can always cound on good information from you reaper 🙂

[jdprovine]

Is there a log or anything where I can get the information you are talking about to show my boss that this is occuring