Global Protect Client - Download Page MFA

[w.naderer]

Hello everyone,
I have a question about the Global Protect Client.
Is it possible to equip only the GP download page in the browser with MFA2 (mail to an address)? But the internal update procedure in the GP client should not be affected by this.

Many Thanks

cu

Wolfgang

[reaper]

Hi Wolfgang

You can create a second portal that is connected to an internal IP. Then make sure you have a public and a private DNS record for the same portal FQDN.

What are you trying to accomplish exactly? users would normally not need to access the portal page to upgrade their agent, this can be pushed inline by setting the upgrade option in the app configuration. this can push the update whenever the user is connected

can you describe your current process?

[w.naderer]

Hi reaper,
Our portal page is also accessible from outside. And you can login at this page with an AD user. I want exactly only for this Site MFA, possible?

I hope I have now expressed myself clearly 😉

Many thanks in advance.

cu
Wolfgang