Hi @ArunKumar7 ,
That is a good question. Here are the details:
GlobalProtect Portal:
- Performs the initial authentication of a client.
- Downloads/upgrades the GlobalProtect Client (Windows and MacOS).
- Pushes configuration to the client.
- Performs a Host Information Profile (HIP) check (if configured and licensed).
- Provides a list of GlobalProtect Gateways.
GlobalProtect Gateway:
- Authenticates GlobalProtect users.
- Creates/maintains the VPN tunnels (SSL or IPsec) for user traffic.
- Assigns IP addresses to users.
- Generates HIP reports (if configured and licensed).
https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/globalprotect-overview/about...
The portal is actually a nice way to perform RA VPN load balancing across regions. The GP client connects to the gateway with the least latency and highest priority (combination). Your users only need to know 1 portal URL and can automatically connect to the appropriate gateway.
Thanks,
Tom
Help the community: Like helpful comments and mark solutions.
