PCNSE Video 26 GlobalProtect/SSL VPN in Details

PCNSE Video 26 GlobalProtect/SSL VPN in Details

GlobalProtect Configuration – Step by Step

1 Do the basic configuration.

2 Create local users (or integrate LDAP / TACACS / RADIUS) and create a User Group if required.

3 Create an Authentication Profile -Type: Local Database
Configure Authentication Sequence if required.

4 Create a Tunnel Interface (without IP).
Create a new zone: GP-Tunnel
Enable User Identification in the zone settings.

5 Create Certificates, mark them as Trust/Untrust, and configure the SSL Profile.

6 Configure the GlobalProtect Portal.

7 Configure the GlobalProtect Gateway:
Assign IP Pool: 172.16.1.1 – 172.16.1.100
In Split Tunnel, add inside subnets so users can access internal applications and servers.

8 Create Security Policy:
Source Zone: GP-Tunnel / Destination Zone: Inside

9 (Optional) Assign IP to the Tunnel Interface:
172.16.1.1/24

10 Install the certificate on the system and connect the GlobalProtect Agent.

#paloaltofirewall #networksecurity #cybersecurity #pcnse #paloaltofirewall #firewall #networksecurity #troubleshooting #soc #learning #vpn

Видео PCNSE Video 26 GlobalProtect/SSL VPN in Details канала Rajesh Dotaniya