RA VPN - SAML testing without affecting production

[moragusa27]

Is there a way to test SAML authentication for Remote Access without affecting the production environment? In FortiGate I can create multiple independent portals and assign specific users/groups to the portals, but not sure if it is possible in PA. I am a bit concerned about having to ask for long maintenance windows in order to making SAML authentication works, and would be great if there would be an option to test this without bothering the users. Thanks.

[BPry]

@moragusa27,

You can create multiple GlobalProtect Portal/Gateway configurations without any issue and just assign it the new Authentication Profile. 

[moragusa27]

@BPry,

Yes, I have tried that but it looks like these Portas/Gateways cannot be working at the same time. I mean, I cannot specify the same Outside interface and same IP adress for the new Gateway/Portals.

Is it possible to have multiple Portals/Gateways enabled at the same time on the same interface/IP? Or should I decide to enable onle one? Thanks.

[BPry · Accepted solution]

@moragusa27,

You can build it out by just using loopback interfaces, you don't need to utilize the actual interface address to built these out. 

[moragusa27]

Thanks, it has worked fine for me.