How do I configure GlobalProtect?

Configure a GlobalProtect Gateway

1. Select the. Interface. that the endpoints will use for communication with the gateway.
2. Specify the. IP Address Type. and. IP Address. for the gateway web service: You can set the. IP Address Type. to. IPv4 Only. , IPv6 Only. , or. IPv4 and IPv6. Use. IPv4 and IPv6.

What are the three major components of GlobalProtect?

GlobalProtect has three primary components: GlobalProtect Gateway: Delivers mobile threat prevention and policy enforcement based on apps, users, content, device and device state. Extends a VPN tunnel to mobile devices with GlobalProtect App. Integrates with WildFire for preventing new malware.

Which three methods for client connections does GlobalProtect support choose three?

GlobalProtect supports all existing PAN-OS® authentication methods, including Kerberos, RADIUS, LDAP, SAML 2.0, client certificates, biometric sign-in, and a local user database.

How do I configure DNS proxy for GlobalProtect clients?

Navigate to Network > DNS Proxy. Configure the tunnel interface to act as DNS proxy. Configure primary and secondary DNS servers to be used. DNS proxy rules can be configured to send a DNS query to the internal DNS server for internal domains.

How do I configure GlobalProtect client to get the same IP address?

From the WebGUI, Go to Network > GlobalProtect > Gateways and edit the appropriate Gateway. Go to Agent > Client Settings > and edit the appropriate Client Config. Go to the IP Pools tab. The GlobalProtect user will be offered the first IP address that is defined in the pool of IP addresses.

How do I create a GlobalProtect portal?

1. Download the GlobalProtect App.
2. Host App Updates on the Portal.
3. Host App Updates on a Web Server.
4. Test the App Installation.
5. Download and Install the GlobalProtect Mobile App.

What is GlobalProtect client?

GlobalProtect App is a lightweight client for mobile devices that establishes VPN connections to the GlobalProtect Gateway, interacts with GlobalProtect Mobile Security Manager to enable device management and provides information about the state of the device.

What is the difference between GlobalProtect portal and gateway?

GlobalProtect PORTAL = maintains the list of all Gateways, certificates used for authentication, and the list of categories for checking the end host. GlobalProtect GATEWAY = provides security enforcement for traffic from the GP Agent, 1 or more interfaces on 1 or more PAN firewalls.

What format can the firewall logs be exported?

CSV Format
Exporting Firewall Logs into CSV Format Times Out from the WebGUI.

Which three configuration tasks for device ID are performed at the firewall?

Which three configuration tasks for Device-ID are performed at the firewall? (Choose three.) Enable Device-ID per zone. Configure a Log Forwarding Profile. Enable EALs.

How do you configure DNS proxy on a Palo Alto Networks firewall?

Steps

1. Navigate to Network > DNS Proxy.
2. Click Add to bring up the DNS Proxy dialog.
3. Select the interfaces on which DNS proxy should be enabled.
4. Select the primary and secondary servers where the firewall should forward DNS queries.
5. Static entries can be added to the DNS proxy.

To implement GlobalProtect, configure: GlobalProtect client downloaded and activated on the Palo Alto Networks firewall Portal Configuration Gateway Configuration Routing between the trust zones and GlobalProtect clients (and in some cases, between the GlobalProtect clients and the untrusted zones)

How to configure GlobalProtect on Palo Alto firewall?

To implement GlobalProtect, configure: 1 GlobalProtect client downloaded and activated on the Palo Alto Networks firewall 2 Portal Configuration 3 Gateway Configuration 4 Routing between the trust zones and GlobalProtect clients (and in some cases, between the GlobalProtect clients and the untrusted zones)

What are the components of GlobalProtect?

There are three essential components that make up the GlobalProtect solution: • GlobalProtect Portal: A Palo Alto Networks next-generation firewall that provides centralized control over the GlobalProtect system. Portal maintains the list of all Gateways, certificates used for authentication, and the list of categories for checking the end host.

How do I configure GlobalProtect gateway to use root-CA?

Click on Client Configuration tab in the Portal configuration and make sure to list the Root-CA under the Trusted Root Section. 4. Go to Network > GlobalProtect Gateway Note: You can optionally have an Authentication Profile in your configuration. 5. Go to Device > Certificates 6. Commit your changes