Palo Alto Lesson: 10.6 Lab: GlobalProtect

After you complete this lesson, you should be able to:
Describe the three major components of GlobalProtect
Configure the client and server certificates to authenticate the agent and the portal
Define the three methods supported for GlobalProtect client connections
Configure the tunnel parameters for an external gateway connection

[vivek]

It's amazing sir.. You have clearly explained the topic... Thank you sir.. Keep on posting videos

[CocinandoMemes]

In the GlobalProtect Gateway configuration is that the Outside interface? Trying to setup this on AWS but the IPV4 option just gives me the None option. Im using DHCP so I was wondering If need to create the object with the assigned IP and just put it there as a /32, Im seeing always /24 when you configure it. and for me it will be a private IP since Im in AWS.

[irfan_b]

Fantastic tutorial .. To the point .. Thank You

[kingsleybrown]

Please, when i have two different authentication profile ( employees and guest ) and i want employees to access all resource and Guest to have limited access to only one resource. How do i achieve this?

[IAm-xrxh]

I'm really like all your vdo. Thanks

[muneebraza]

where do I need to register to get the info that you entered while creating the LDAP server?

[felixmoshami]

well explained the problem i now have is how to configure a wild card ssl certificate in my palo alto can you help with this

[balajipraveen]

You have not showed the security policy and Nat policy for this setup. could you please respond to me like what could be source and destination zone for security policy plz

[boh]

whats going on ? did you remove some of the content ? i can only see the LAB part of the chapters, Thanks

[marcodecristofaro]

Thank you for the tutorial!! just a question, is there any way to download the internal certificate on the user's machine when he try to connect to GlobalProtect for the first time? or i need to import the certificate for any user manually?

[Black_Swan]

Amazing!

Thanks for sharing the video.
I'm using PAN-OS 8.0.0vm, it's unlicensed. Do I need a licensed copy of the PAN-OS for a Global Protect Client?
From the portal, When I click on the link to download a Global Protect client on the workstation, i get an error message "Unable to download getmsi.esp"
Please let me know.