How to Configure Internal GlobalProtect Only
145532
Created On 09/25/18 17:36 PM - Last Modified 01/30/25 22:24 PM
Objective
- This document describes the steps to configure an internal only GlobalProtect Gateway.
- This document was created on Palo Alto Networks device running PAN-OS 8.0
Environment
- PAN-OS
- GlobalProtect (GP)
Procedure
- Identify the interface where the customers are going to connect.
- Configure GlobalProtect Gateway:
- Use the dropdown list to select the internal interface, IP address, and SSL/TLS Service Profile, and Authentication Profile
- Client configuration for the internal gateway is not needed if tunneling is not performed
Internal Gateway Authentication
- Configure GlobalProtect Portal:
- Use the dropdown list to select the internal interface, IP address, and SSL/TLS Service Profile, and Authentication Profile
- Add the trusted Root CA
- Add Agent Configuration
- Make sure the Connect Method is not On-Demand
- Add the gateway to the list of internal gateways
GP Portal Authentication
GP Portal Agent configuration
Agent Internal Gateway configuration
Agent App behavior - always-on
Now connect through the internal gateway:
Additional Information
Reference the GlobalProtect Administrator Guide for any additional help with configuring GlobalProtect:
GlobalProtect Administrator's Guide 9 (English)