If you simply want to use GlobalProtect to provide a secure, remote access or virtual private network (VPN) solution via single or multiple internal/external gateways, you do not need any GlobalProtect licenses. However, to use some of the more advanced features, such HIP checks and associated content updates and support for the GlobalProtect mobile app, you need to purchase an annual gateway subscription. This license must be installed on each firewall running a gateway(s) that performs HIP checks and that supports the GlobalProtect app on mobile devices.

See Activate Licenses for information on installing licenses on the firewall.