How do you allow GlobalProtect users connected to the network access to the internet through the firewall on which GP is configured?

[InfoSecPro]

How do you allow GlobalProtect users connected to the network access to the internet through the firewall on which GP is configured?

[Mick_Ball]

Presuming you have the internet interface as a default route then just add a security policy to allow all traffic from the GlobalProtect assigned zone to the internet assigned zone..,, or even less granularx2 any any any any…

or to be less granular, from GP zone to any… or to be more granular, enable user Id and allow users to internet zone.. you have many options/variations as long as routing is in place… HTH.