Need Help on Configuring GlobalProtect VPN

[lizaclarraa]

Hello there,

I am working on setting up GlobalProtect VPN for our organization and could use some advice. We have a mixed environment with Windows, macOS, and Linux machines, and we're looking to ensure a seamless experience for our users.

Specifically; I am interested in hearing about best practices for;

Configuring GlobalProtect for a mixed OS environment.

Ensuring compatibility and performance across different devices.

Implementing security measures, such as two-factor authentication.

Managing and monitoring VPN usage and performance.

Also, I have gone through this; https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/globalprotect-gateways/confi...aws-globalprotect-gateway which definitely helped me out a lot.

If you have any experience or tips to share regarding these topics, I would greatly appreciate it.

Also; if there are any common pitfalls or challenges to watch out for, please let me know.

Thank you in advance for your help and assistance.

[Claw4609]

Hello,

What authentication method are you looking at using for GlobalProtect? That would really be the only thing that may affect certain configuration between those devices. If you intend to use HIP profiles as well that information gathered between ths OSs would provide different information. 

For example, what we've found works best is SAML authentication, this sets one authentication profile on the Palo and the SAML side handles the MFA. Certain things to consider with SAML is, that SAML can be the only authentication method if you use SAM, i.e. you cant have an authentication sequence and fail back to other methods. I believe you also can do always-on on IOS devices due to how Apple handles SAML.

[Raido_Rattameister]

Do you have GlobalProtect subscription?

To use GlobalProtect app on Linux or on mobile devices requires active subscription.

https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-overview/abou...