Portal url for VPN gateway no authentication

cancel
Showing results for 
Search instead for 
Did you mean: 

Portal url for VPN gateway no authentication

Hello Bros'

               I have a strange issue "As I think it is issue". Our configured Portal for downloading the GlobalProtect gateway for our VPN connected employees supposed to authenticate firstly so that if from any where use internet brower https://x.y.z.k "portal address" we acccept the certificate, then authenticate normally "name/password".

But:

if we copy the browser URL "after authentication process" and past it later on any other browser on any other PC, the URL directly and without any authentication open to the GlobalProtect downnload page.

I belive this is not normal behaviour even if this page for only downloading the available from any where else agent software.

Id this acceptable? how to correct this if it's an issue?

TIA.

MR
1 ACCEPTED SOLUTION

Accepted Solutions

Cyber Elite
Cyber Elite

@MohammadRamadanA.Hafiez,

This is by design, that agent download page itself isn't actually restricted at all. While I would personally consider that to be bad design, it isn't something that you can change. While this means that anyone can download the agent from your portal without entering in a username/password and authenticating, it doesn't allow someone to connect to your gateway without actually authenticating and gaining access to your network.

View solution in original post

3 REPLIES 3

Cyber Elite
Cyber Elite

@MohammadRamadanA.Hafiez,

This is by design, that agent download page itself isn't actually restricted at all. While I would personally consider that to be bad design, it isn't something that you can change. While this means that anyone can download the agent from your portal without entering in a username/password and authenticating, it doesn't allow someone to connect to your gateway without actually authenticating and gaining access to your network.

@BPry  From that I conclude that this is by design and no security c oncerns. "Kindly, confirm"

Thank you so much.

MR

Cyber Elite
Cyber Elite

@MohammadRamadanA.Hafiez,

It's by design. The only security concern that would really be raised by this is that someone could use it to launch a DoS attack against your GlobalProtect portal by downloading those files from a bunch of different sources and use it to assist in overwhelming your firewall or internet circuit. 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!