If you want to use GlobalProtect for secure remote access or VPN, no license is
needed. However, advanced features like HIP checks, mobile app support, IPv6, split
tunneling, and Clientless VPN require a GlobalProtect gateway license.
If you want to use GlobalProtect to provide a secure remote access or VPN solution via single or
multiple internal/external gateways, you don't need any GlobalProtect licenses. However,
to use some of the more advanced features (such as HIP checks and associated content
updates, support for the GlobalProtect mobile app, or IPv6 support) you must purchase an
annual GlobalProtect Gateway license. This license must be installed on each firewall
running a gateway that: