About GlobalProtect Licenses

If you simply want to use GlobalProtect to provide a secure, remote access or virtual private network (VPN) solution via single or multiple internal/external gateways, you do not need any GlobalProtect licenses. However, to use some of the more advanced features (such as HIP checks and associated content updates, support for the GlobalProtect mobile app, or IPv6 support) you need to purchase an annual GlobalProtect subscription. This license must be installed on each firewall running a gateway(s) that:
  • Performs HIP checks
  • Supports the GlobalProtect app on mobile devices
  • Provides IPv6 connections
For GlobalProtect Clientless VPN, this feature also requires you to install a GlobalProtect subscription on the firewall that hosts the Clientless VPN from the GlobalProtect portal. You also need the GlobalProtect Clientless VPN dynamic updates to use this feature.
Feature
Subscription Required?
Single, external gateway (Windows and Mac)
Single or multiple internal gateways
Multiple external gateways
HIP Checks
check-mark.png
Mobile app for iOS endpoints, Android endpoints, Chromebooks, and Windows 10 UWP endpoints
check-mark.png
IPv6 for external gateways
check-mark.png
IPv6 for internal gateways
(change to default behavior—starting with GlobalProtect app 4.1.3, a GlobalProtect subscription is not required for this use case)
Clientless VPN
check-mark.png
See Activate Licenses for information on installing licenses on the firewall.

Related Documentation