End-of-Life (EoL)

Set Up Access to the GlobalProtect Portal

After you have completed the Prerequisite Tasks for Configuring the GlobalProtect Portal, configure the GlobalProtect portal as follows:
  1. Add the portal.
    1. Select
      and click
    2. On the
      page, enter a
      for the portal. The name cannot contain spaces.
    3. (
      ) Select the virtual system to which this portal belongs from the
  2. Specify network settings to enable agents to communicate with the portal.
    If you have not yet created the network interface for the portal, see Create Interfaces and Zones for GlobalProtect for instructions. If you have not yet created an SSL/TLS service profile for the portal, see Deploy Server Certificates to the GlobalProtect Components.
    Do not attach an interface management profile that allows HTTP, HTTPS, Telnet, or SSH on the interface where you have configured a GlobalProtect portal or gateway because this enables access to your management interface from the Internet. Follow the Best Practices for Securing Administrative Access to ensure that you are securing administrative access to your firewalls in a way that will prevent successful attacks.
    1. Select the
    2. Specify the
      IP Address Type
      IP address
      for the portal web service:
      • The IP address type can be
        (for IPv4 traffic only),
        (for IPv6 traffic only, or
        IPv4 and IPv6.
        IPv4 and IPv6
        if your network supports dual stack configurations, where IPv4 and IPv6 run at the same time.
      • The IP address must be compatible with the IP address type. For example,
        for IPv4 addresses or
        for IPv6 addresses. For dual stack configurations, enter both an IPv4 and IPv6 address.
    3. Select an
      SSL/TLS Service Profile
  3. Disable the login page entirely or choose your own login page or help page. Although optional, a custom login or help page lets you decide on the look and content of the pages. See Customize the GlobalProtect Portal Login, Welcome, and Help Pages.
    • Choose a
      Portal Login Page
      for user access to the portal or import a new one, or
      access to the GlobalProtect portal login page from a web browser.
    • Choose a
      App Help Page
      to assist the user with GlobalProtect or import a new one.
  4. Specify how the portal authenticates the users.
    If you have not yet created a server certificate for the portal and issued gateway certificates, see Deploy Server Certificates to the GlobalProtect Components.
    On the GlobalProtect Portal Configuration dialog, select
    , and then configure any of the following:
    • To secure communication between the portal and the agents, select the
      SSL/TLS Service Profile
      you configured for the portal.
    • To authenticate users using a local user database or an external authentication service, such as LDAP, Kerberos, TACACS+, SAML, or RADIUS (including OTP), Define the GlobalProtect Client Authentication Configurations
  5. Save the portal configuration.
    1. Click
      to save the settings and close the GlobalProtect Portal Configuration dialog.
    2. Commit
      the changes.

Recommended For You