>
    Ports Used for GlobalProtect
    Focus
    Download PDF
    Focus
    1. Home
    2. Next-Generation Firewall
    3. Firewall Administration
    4. Reference: Port Number Usage
    5. Ports Used for GlobalProtect
    Download PDF
    Next-Generation Firewall

    Ports Used for GlobalProtect

    Table of Contents

    Ports Used for GlobalProtect

    Network ports and protocols used by GlobalProtect VPN client and gateway communications in PAN-OS firewall configurations.
    GlobalProtect uses the following ports.
    Destination Port
    Protocol
    Description
    443
    TCP
    Used for communication between GlobalProtect apps and portals, or GlobalProtect apps and gateways and for SSL tunnel connections.
    GlobalProtect gateways also use this port to collect host information from GlobalProtect apps and perform host information profile (HIP) checks.
    4501
    UDP
    Used for IPSec tunnel connections between GlobalProtect apps and gateways.
    For tips on how to use a loopback interface to provide access to GlobalProtect on different ports and addresses, refer to Can GlobalProtect Portal Page be Configured tobe Accessed on any Port?

    © 2025 Palo Alto Networks, Inc. All rights reserved.