Point to site VPN on pan 0S 11+ (Client to remote VPN server)

[din100]

I remember reading some where Palo Alto firewalls works like a client to access remote VPN servers 

eg I can setup the PALO to access a OpenVPN server and give access to user on my palo managed local network to access that remote resource, than user installing the OpenVPN application on their computer and connecting. 

Hope I'm making any sense. all I need is a location on the Palo docs I can't seems to find it. I pretty sure I read that, 

Thank you in advance 

[reaper]

OpenVPN users are able to connect to a GlobalProtect gateway as a 3rd party vpn client

The Palo firewall cannot connect to openvpn as it (openvpn) does not support IPSec

if your users need to connect to an openvpn server, you'll need to set a security rule allowing these connections from the users to the remote server

[din100]

Thank you forget the openvpn server I said that as an example. 

If the  end vpn-server  supports  IPSec connection then can I use Palo to connect ? like azure point to site VPN ? I want to know where you configure this setting. 

All the docs  I find are for site to site connection 

[reaper · Accepted solution]

the palo firewall can only connect to a peer using traditional IPSec connections, it cannot act as a P2S client