Set Up Access to the GlobalProtect Portal

After you have completed the Prerequisite Tasks for Configuring the GlobalProtect Portal, configure the GlobalProtect portal as follows:
  1. Add the portal.
    1. Select
      Network
      GlobalProtect
      Portals
      , and then
      Add
      a portal.
    2. Enter a
      Name
      for the portal. The name cannot contain spaces.
    3. (
      Optional
      ) Select the virtual system to which this portal belongs from the
      Location
      field.
  2. Specify network settings to enable the GlobalProtect app to communicate with the portal.
    If you have not yet created a network interface for the portal, see Create Interfaces and Zones for GlobalProtect. If you have not yet created an SSL/TLS service profile for the portal, see Deploy Server Certificates to the GlobalProtect Components.
    Do not attach an interface management profile that allows HTTP, HTTPS, Telnet, or SSH on the interface where you have configured a GlobalProtect portal or gateway because this enables access to your management interface from the Internet. Follow the Best Practices for Securing Administrative Access to ensure that you are securing administrative access to your firewalls in a way that will prevent successful attacks.
    1. Select an
      Interface
      .
    2. Specify the
      IP Address Type
      and
      IP address
      for the portal web service:
      • The IP address type can be
        IPv4 Only
        ,
        IPv6 Only
        , or
        IPv4 and IPv6.
        Use
        IPv4 and IPv6
        if your network supports dual stack configurations, where IPv4 and IPv6 run at the same time.
      • The IP address must be compatible with the IP address type. For example,
        172.16.1/0
        for IPv4 addresses or
        21DA:D3:0:2F3B
        for IPv6 addresses. For dual stack configurations, enter both an IPv4 and IPv6 address.
    3. Select an
      SSL/TLS Service Profile
      .
  3. Select custom login and help pages or disable the login and help pages entirely. See Customize the GlobalProtect Portal Login, Welcome, and Help Pages for more details on creating a custom login page and help page.
    In the
    Appearance
    area of the GlobalProtect Portal Configuration dialog (
    Network
    GlobalProtect
    Portals
    <portal-config>
    General
    ), configure the following settings:
    • To set the
      Portal Login Page
      for user access to the portal, select the
      factory-default
      login page,
      Import
      a custom login page, or
      Disable
      access to the login page.
    • To set the
      App Help Page
      to provide assistance to users with the GlobalProtect app, select the
      factory-default
      help page,
      Import
      a custom help page, or select
      None
      to remove the
      Help
      option from the
      Settings
      menu of the GlobalProtect status panel.
  4. Specify how the portal authenticates the users.
    If you have not yet created a server certificate for the portal and issued gateway certificates, see Deploy Server Certificates to the GlobalProtect Components.
    Configure any of the following portal
    Authentication
    settings (
    Network
    GlobalProtect
    Portals
    <portal-config>
    Authentication
    ):
    • To secure communication between the portal and the GlobalProtect app, select the
      SSL/TLS Service Profile
      that you configured for the portal.
    • To authenticate users through a local user database or an external authentication service, such as LDAP, Kerberos, TACACS+, SAML, or RADIUS (including OTP), Define the GlobalProtect Client Authentication Configurations
      .
    • To authenticate users based on a client certificate, select the corresponding
      Certificate Profile
      . A valid client certificate must be pre-deployed on all endpoints.
  5. Save the portal configuration.
    1. Click
      OK
      to save the settings.
    2. Commit
      the changes.

Related Documentation