Global protect Query

[ArunKumar7]

Hi All,

I am new to Palo Alto and I am doing SSL VPN(Global Protect).
I am a little confused about the Portals and Gateway, as I can see almost the same config on portal and gateway.,

What is the actual difference between the portals and Gateway?Thanks in advance.

[TomYoung]

Hi @ArunKumar7 ,

That is a good question.  Here are the details:

GlobalProtect Portal:

• Performs the initial authentication of a client.
• Downloads/upgrades the GlobalProtect Client (Windows and MacOS).
• Pushes configuration to the client.
• Performs a Host Information Profile (HIP) check (if configured and licensed).
• Provides a list of GlobalProtect Gateways.

GlobalProtect Gateway:

• Authenticates GlobalProtect users.
• Creates/maintains the VPN tunnels (SSL or IPsec) for user traffic.
• Assigns IP addresses to users.
• Generates HIP reports (if configured and licensed).

https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/globalprotect-overview/about...

The portal is actually a nice way to perform RA VPN load balancing across regions.  The GP client connects to the gateway with the least latency and highest priority (combination).  Your users only need to know 1 portal URL and can automatically connect to the appropriate gateway.

Thanks,

Tom

[ArunKumar7]

Thanks for the reply Tom.

But I can see authentication is available in both portal and gateway?