When are the Global Protect Portal and Gateway Licenses Required?

Overview

Listed below are scenarios when the GlobalProtect Portal and Gateway licenses are required:
 

1. Global Protect Portal License

Prior to PAN-OS 7.0:

The GlobalProtect Portal license is required when:

• Using HIP
• Configuring multiple gateways
• Configuring internal gateway

PAN-OS 7.0 and later:

• GlobalProtect Portal license is not required.
• Thus the GUI dashboard will show the license as being expired

2. GlobalProtect Gateway License  

The GlobalProtect Gateway license is required when:

• Using HIP
• Using iOS or Android mobile application

The GlobalProtect Gateway License requirement remains same for PAN-OS version 7.0 and later.

NOTE:
High Availability deployment of the portal and gateway requires identical licenses to be installed on both the devices.