Clientless VPN and Remote Desktop

[nwnetadmin]

I have a question about clientless VPN and Remote Desktop.

We have a Global Protect portal, but we only use it with the client. I have a new project to provide remote access via RDP to an internal windows computer for a select user. I've never done clientless VPN on a palo before, but as I understand it is possible. Expectation is that the user would log in through the web(through current gp portal) and then they would have a link to RDP to a specific workstation.

I found a techdoc on it, so I am just working through that.

Is is possible to do it with RDP? How does work? Does the firewall have a plug-in that behaves like the RDP client, or does it "call" the windows RDP client?

Does it matter what OS and browser the remote user is using?

As an alternative, I considered adding a network policy that only allows a particular user to rdp to a particular host. But, it would be really good if the user didn't have to load the global protect client.

Any other tips or comments? I need to have this configured in the next couple of days.

Thanks!