How to run GlobalProtect on an IP Address Other than the One Configured on Interface

For this scenario, the IP address 192.168.200.1/24 is configured on ethernet1/3 and the user wants to run GlobalProtect on the IP address 192.168.200.2:

• Next-Gen Firewalls
• Supported PAN-OS
• GlobalProtect

There are two ways to achieve this:

1. Configure the IP address 192.168.200.2/32 as additional IP on the interface 1/3.

2. Now, select this IP address in the GlobalProtect configuration after selecting interface ethernet1/3.
3. The second option is to terminate GlobalProtect on the loopback interface and create a NAT policy to perform a destination NAT from 192.168.200.2 to the loopback IP address.

How to create and view NAT Policies using the CLI
Resource List: Security Policy Configuring and Troubleshooting