GP with Host detetion and auto-connect

[VinceM]

Hi,

PA 500 in 5.0.4 and GP client 1.2.3

Would like to be sure, I need GP auto connexion from outside of my network and no GP in my network.

Then configure my external gateway, my internal host detection. It works well.

But short question do I need the GP license for that ? Normally no, just one gateway, no HIP then no license ....

During my test, it seem that despite the iternal host detection, when users are internal, GP try to create the Tunnel connexion .....

Make sens for you ?

v.

[panos · Accepted solution]

As I know you don't need a license for enforcement.

did you check if internal host ip is a good choice ?

Internal Host Detection

This option is used to determine whether the host is inside or outside of the corporate network. Once this is determined, the agent will connect to the corresponding Gateway.

If “Internal Host Detection” is enabled, the DNS name entered specifies a hostname that can only be reached from internal network and its IP address. The agent performs a reverse lookup on the IP address and if it receives the expected hostname as a response, it will attempt to connect to the gateways in the internal gateway list. If no response is received, the agent will attempt to connect to the external gateways in the external gateway list.

[emr_1]

I add information to panos's reply.

If you need to use internal gateway, you need GP Portal license.

Reference:

[panos]

yes internal gateway needs license

But the case is do you need internal gateway or not

[VinceM]

Thx all for your help.

I would like to have auto connect from user's laptop when they are outside of my network.

What's happen if I don't configure host side detection ? When peaple are on my network, GP will try and try and try  ... to connect ?

confirmed ?

V.

[panos]

when I did not configure host detect, it tried to connect and then stopped(icon) but it was still saying connecting while in LAN.