09-02-2026 07:46 AM
Hello,
We are using globalprotect for users to connect to our network, but recently we have another set of users that we would like to put them on a separate network. We created another profile on the Gateway specifying that if certain users, we have connection with SAML, should receive the IP address of the secondary subnet. We moved this profile to the top, to be the first one. However is not working, they still receiving the IP from the other subnets configured long time ago. if any help, i would appreciate.
#vpngateways #globalprotect
09-02-2026 05:14 PM
Hi @YParreno ,
Can you explain what you mean by creating another profile on the gateway? Do you mean that you created a new client auth profile for these new users and specified the auth profile to be SAML? And then create a Client Agent config profile? Also, for the existing client auth profile, what type of auth are you using there?
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
