User-ID and Internal Gateway

[seag]

Hello guys,

I want to implement GlobalProtect with Internal and External Gateway. Internal gateway will be used for User-ID and External Gateway for Remote Access.

Is there a way to prevent users from disconnecting GP when inside corporate network and allow them to disconnect when outside corporate network ?

Thanks !

Regards

[OtakarKlier]

Hello,

I can think of several things:

• Configure your policies with user-id's and active directory groups. That way if they disable it and try to get to internal resources, etc, they are limited to what they can get to.
• Force everyone to VPN in, a step closer to zero trust. I wrote and article on it.
  • https://skrzsecurity.net/zero-trust

I'm sure there are other options.

Regards,