Tutorial: GlobalProtect Clientless VPN

This video will guide Next-Generation Firewall administrators through the process of configuring and securing Clientless GlobalProtect access to public and private network resources.

NOTE: GlobalProtect Cloud Service has changed to Prisma Access.

In this video, we will cover the following:
- GlobalProtect Clientless VPN Overview
- How it works and Supported Technologies
- Configuration Scenario, Activities, and Demo

GlobalProtect Clientless VPN Overview
-Introduced in PAN-OS 8.0
-Enables secure access to enterprise applications for users with unmanaged endpoints such as partners and contractor
- Does not require installing the GlobalProtect software
- Leverage secure access from SSL-enabled web browsers

How it Works
The Clientless VPN acts as a reverse proxy and modifies web pages returned by the published web applications. It rewrites all URL and presents a rewritten page to remote users, so when they access any of those URLs, the requests go through the GlobalProtect portal.

Video Resources:

New Features In GlobalProtect Cloud Services 1.3.1

Clientless GlobalProtect Documentation

Clientless GlobalProtect Overview

[rob]

How do you enable SSH or RDP like it says in the Palo documentation?

[LadanMMas]

Thanks, it is a good one. Can you elaborate on why in PANOS 8.1- we have to choose service-http and service-https instead of application-default? Web-browsing is opening ports 80 and 443, can you explain what is the difference between these ports and the services above? And what is different in PANOS 8.1- and 9.0+ in this regards? Thanks.

[torohuang]

Hi, I have some question, I wanna use clientless vpn jump to other website, and use this website connect to my rdp or ssh server, but it's doesn't work, where can I fix config? This website system is ANCHOR.

[tjmns]

Hello. What do you do if a home based worker's active directory password expires and the globalprotect client is not prompting to enter a new password? how do you get them connected again, after the helpdesk resets their password. (v. 4.1.10-4) Thx !

[ragon]

It's possible to have a SSL VPN with a portal, the users will use a clientless access, but there is a way to have on the portal a terminal session launch? So he can access his on premisses machine that are located in the office?

[LunaPaws]

Can I use it, with virtual wire mode?

[Nikoolayy]

You accent makes it a little hard for me to understand the material. It is not terrible but I had to be honest and mention this.

[elevenbitghost]

Sorry but it's a little bit difficult to understand your words with this horrible mic quality...