About GlobalProtect Licenses
If you simply want to use GlobalProtect to provide a secure, remote access or virtual private network (VPN) solution via single or multiple internal/external gateways, you do not need any GlobalProtect licenses. However, to use some of the more advanced features (such as HIP checks and associated content updates, support for the GlobalProtect mobile app, or IPv6 support) you need to purchase an annual GlobalProtect subscription. This license must be installed on each firewall running a gateway(s) that:
- Performs HIP checks
- Supports the GlobalProtect app on mobile devices
- Provides IPv6 connections
For GlobalProtect Clientless VPN, this feature also requires you to install a GlobalProtect subscription on the firewall that hosts the Clientless VPN from the GlobalProtect portal. You also need the GlobalProtect Clientless VPN dynamic updates to use this feature.
Single, external gateway (Windows and Mac)
Single or multiple internal gateways
Multiple external gateways
Mobile app for iOS endpoints, Android endpoints, Chromebooks, and Windows 10 UWP endpoints
IPv6 for external gateways
IPv6 for internal gateways
(change to default behavior—starting with GlobalProtect app 4.1.3, a GlobalProtect subscription is not required for this use case)
See Activate Licenses for information on installing licenses on the firewall.
Activate Licenses and Subscriptions
Activate Licenses and Subscriptions Before you can start using your firewall to secure the traffic on your network, you must activate the licenses for each ...
GlobalProtect Features New GlobalProtect Features Description Clientless VPN You can now use Clientless VPN for securing remote access to common enterprise web applications that use ...
Mixed Internal and External Gateway Configuration
Mixed Internal and External Gateway Configuration In a GlobalProtect mixed internal and external gateway configuration, you configure separate gateways for VPN access and for access ...
GlobalProtect Multiple Gateway Configuration
GlobalProtect Multiple Gateway Configuration In GlobalProtect Multiple Gateway Topology , a second external gateway has been added to the configuration. Multiple gateways are supported in ...
Network > GlobalProtect > Clientless Apps
Network > GlobalProtect > Clientless Apps Select Network GlobalProtect Clientless Apps to add applications that are accessible through the GlobalProtect Clientless VPN. You can add ...
GlobalProtect for Internal HIP Checking and User-Based Access
GlobalProtect for Internal HIP Checking and User-Based Access When used in conjunction with User-ID and/or HIP checks, an internal gateway can be used to provide ...
Define the GlobalProtect Agent Configurations
Define the GlobalProtect Agent Configurations After a GlobalProtect user connects to the portal and is authenticated by the GlobalProtect portal, the portal sends the agent ...
Configure Clientless VPN
Configure Clientless VPN To configure GlobalProtect Clientless VPN : Before you begin: Install a GlobalProtect subscription on the firewall that hosts the Clientless VPN from ...