For details on cookie usage on our site, read our Privacy Policy
Multiple URL Global Protect Multiple FQDN
- LIVEcommunity
- Discussions
- General Topics
- Multiple URL Global Protect Multiple FQDN
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Printer Friendly Page
Multiple URL Global Protect Multiple FQDN
- Mark as New
- Subscribe to RSS Feed
- Permalink
12-11-2019 08:31 AM
We would like to use multiple URL's to access our Palo with Multiple LDAP authentication.
portal.company1.com
LDAP1
portal.company2.com
LDAP2
portal.company3.com
LDAP3
We could also do like
C1.company.com
LDAP1
C2company.com
LDAP2
C3company.com
LDAP3
Can anybody guide me to a solution so far support has not been super helpfull.
Another is portal.company
with authentication sequence but that requires more work for the users.
I am a little new to Palo could use help .
- Mark as New
- Subscribe to RSS Feed
- Permalink
12-11-2019 08:46 AM
I'm looking to do something similar. I have 2 Palo's both with a GP gateways setup and I'm thinking of using DNS roundrobin to hit either one of them using a single Portal URL company.domain.
Not sure if this is the best way to do it or not. But basically i want clients to only have to configure 1 Portal URL on the client and then hit either one of my palo's.
- Mark as New
- Subscribe to RSS Feed
- Permalink
12-11-2019 08:51 AM
You really want to do multiple gateways then ? This is sorta the other way around.
- Mark as New
- Subscribe to RSS Feed
- Permalink
12-11-2019 08:56 AM - edited 12-11-2019 08:57 AM
Yes since I have 2 egress points in my network, each one with a Palo. In case of fail over or an outage at one location, i want my users to hit the other Palo and still have access to the network. I was hoping to achieve this by using a DNS entry with 2 ips pointing to each one of my Gateways. which would have the same name of course.
It's mainly going to be used during maintenance windows/outages really. Either Palo can handle all my VPN connections individually but i'm trying to give the highest VPN availability i can.
- Mark as New
- Subscribe to RSS Feed
- Permalink
12-11-2019 09:01 AM
You can do that too. When you use the gateway it allows for that as well as mulitple ip addresses and the client will do the work from there but ... The timeout might be a factor IDk
- Searching for multiple hashes on cortex XDR in Cortex XDR Discussions
- Formatting an Array of Values in Cortex XSOAR Discussions
- Global Protect multiple VPN and multiple authentication methods in General Topics
- Connect same VLAN to multiple V-SYS in General Topics
- Agent Blocking files/processes dynamically based on conditions in Cortex XDR Discussions
Show your appreciation!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
