Restricting Global protect VPN access to specific countries

Reply
fwmike
L2 Linker

@TechnologySvcs , did you get this working?

 

I require this capability in a new GP deployment and would like to avoid putting another device upstream to restrict the portal and gateway access by region.

 

Thanks

Sunugopal
L1 Bithead

fyi, in my case it did not work at that time. I haven't tried again.

 

But i believe it is possible to restrict Global protect access to your public ip address using security policy rules.

 

Try creating two rules as mentioned below.

 

RULE1

--------

source zone : outside

source address : IN  (for eg. India, add required countries)

destination zone : outside

destination address :  x.x.x.x (your public ip) 

applications : panos-global-protect, panos-web-interface, ssl, 

service : application-default

action: allow

 

RULE2

--------

source zone : outside

source address : any

destination zone : outside

destination address :  x.x.x.x (your public ip) 

applications : panos-global-protect, panos-web-interface, ssl, 

service : application-default

action: deny

 

MickBall
L7 Applicator

@fwmike , Hi.

 

yes, gateway selection visa regions does work for both windoze and ios.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!