[Global Protect][Clientless VPN][Automatic authentication]

[NajibBakir]

Hello community, can I set up the GlobalProtect VPN clientless to connect and authenticate automatically without human intervention? Actually, I have a web server on which my website is hosted, and I'd like it to communicate with my branch's local server via global Protect. I put my VPN's public IP address in the script, but it doesn't work, I believe it requires authentication to access the portal.

Is there any script that I can use to authenticate and connect to global Protect in the code of my website?

Thanks in advance.

[nikoolayy1]

Try using SSL client authentication:

https://docs.paloaltonetworks.com/globalprotect/8-1/globalprotect-admin/globalprotect-clientless-vpn...

Also still even with username and pasword you can make your script to fill in the portal web form but you have to play with html forms and parameters. Also if the server where the script is placed is domain joined maybe NTLM or Kerberos can help:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm2uCAC&refURL=http%3A%2F%...

https://docs-new.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/user-identification/devic...

[NajibBakir]

Hi Nikolay_Dimitrov,

Thanks for your reply.

"but you have to play with html forms and parameters" ==>:This is exactly what I was looking for, and my question is whether Paloalto has a standard script (for web, android or IOS ..) that automates the authentication process for VPN clientless.

Thanks in advance

[nikoolayy1]

I personally don't have such script but you can also check with the Palo Alto TAC support as they in many cases offer help with such scripts. 

[NajibBakir]

HI Nikolay

Good day

thanks for your reply,I'll go ahead and open a Ticket 🙂