GlobalProtect Gateway Authentication Tab
Select NetworkGlobalProtectGatewaysAuthentication to identify the SSL/TLS service profile and to configure the details of client authentication. You can add multiple client authentication configurations.
GlobalProtect Gateway Authentication Settings
SSL/TLS Service Profile
Select an SSL/TLS service profile for securing this GlobalProtect gateway. For details about the contents of a service profile, see Device > Certificate Management > SSL/TLS Service Profile.
Client Authentication Area
Enter a unique name to identify this configuration.
By default, the configuration applies to all clients. You can refine the list of client endpoints by OS (Android, Chrome, iOS, Mac, Windows, or WindowsUWP), by Satellite devices, or by third-party IPSec VPN clients (X-Auth).
The OS is the main differentiator between multiple configurations. If you need multiple configurations for one OS, you can further distinguish the configurations by your choice of authentication profile.
Order the configurations from most specific at the top of the list to most general at the bottom.
Choose an authentication profile or sequence from the drop-down to authenticate access to the gateway. Refer to Device > Authentication Profile.
To help end users know what credentials they should use for logging into this gateway, you can enter a message or keep the default message. The message can have a maximum of 100 characters.
(Optional) Select the Certificate Profile the gateway uses to match those client certificates that come from user endpoints. With a Certificate Profile, the gateway authenticates the user only if the certificate from the client matches this profile (see Device > Certificate Management > Certificate Profile).
GlobalProtect Portals Authentication Configuration Tab
GlobalProtect Portals Authentication Configuration Tab Select Network GlobalProtect Portals Authentication to configure several different types of GlobalProtect portal settings: An SSL/TLS service profile that the ...
About GlobalProtect Cipher Selection
About GlobalProtect Cipher Selection GlobalProtect supports both IPSec and SSL tunnel modes. GlobalProtect also supports the ability to enable and require the GlobalProtect agent to ...
SAML 2.0 Authentication for GlobalProtect
SAML 2.0 Authentication for GlobalProtect GlobalProtect portals, gateways, and clients now support SAML 2.0 Authentication . If you have chosen SAML as your authentication standard, ...
GlobalProtect Certificate Best Practices
GlobalProtect Certificate Best Practices The following table summarizes the SSL/TLS certificates you will need, depending on which features you plan to use: Certificate Usage Issuing ...
Set Up LDAP Authentication
Set Up LDAP Authentication LDAP is often used by organizations as a central repository for user information and as an authentication service. It can also ...
Configure a GlobalProtect Gateway
Configure a GlobalProtect gateway to enforce security policies and provide VPN access for your users. ...
Prerequisite Tasks for Configuring the GlobalProtect Portal
Prerequisite Tasks for Configuring the GlobalProtect Portal Before you can configure the GlobalProtect portal, you must complete the following tasks: Create the interfaces (and zones) ...
Prerequisite Tasks for Configuring the GlobalProtect Gateway
Prerequisite Tasks for Configuring the GlobalProtect Gateway Before you can configure the GlobalProtect gateway, you must have completed the following tasks: Created the interfaces (and ...
Deploy Server Certificates to the GlobalProtect Components
Deploy Server Certificates to the GlobalProtect Components The following table shows the best practice steps for deploying SSL/TLS certificates to the GlobalProtect components: Import a ...