Global Protect Internal Gateway/VPN

Showing results for 
Show  only  | Search instead for 
Did you mean: 

Global Protect Internal Gateway/VPN

L1 Bithead

Can we have Global Protect Internal VPN working same as external, means on-demand and  when we connect to internal gateway we should get an IP assigned from firewall. In that case we can restrict that IP pool  in security policies to access critical IT Infrastructure, allowing management of IT Infrastructure only from that internal IP pool.


I understood from different blogs that Global Protect internal VPN is only supports always-on VPN and does not assign it true?


Cyber Elite
Cyber Elite


Yup, this wouldn't be an issue at all. You would just enable Tunnel Mode under the Agent Tunnel Settings on the internal gateway. 

  • 1 replies
  • 47 Subscriptions
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!