Questions about internal gateway

[KiCheon.Lee]

Hello everyone,

I have questions about global protect internal gateway.

1.

What difference are between tunnel mode and non tunnel mode on internal gateway?

Encrypted? or Something?

2.

If customer does not use external gateway, Can I set external gateway instead of internal gateway purpose for accessing internal resources?

Because my customer feel heavy to pay portal license.

I need assistance to impress them why have to buy portal license and what benefit.

KC Lee

[Satish]

Hello KC,

Please find the below link for the same.

http://www.altaware.com/v/paloalto/globalprotect/

https://www.paloaltonetworks.com/products/technologies/globalprotect.html

Regards

Satish

[aabdelhali · Accepted solution]

KC

Tunnel mode will establish IPSEC/SSL tunnel between the gateway and the client, this is usually used with External Gateways, but for internal gateways usually they don't use tunnel mode and it is used for userid and hip check. Also, for tunnel mode an extra header will be added to the packet

You can use the external gateway, just make sure the interface is your inside interface (LAN) which is accessible by the users

Let me know if you have any more questions

[ulti]

wow that altaware site does a better job of describing Palo and GP than Palo itself does