to define the gateway interface
to which the apps can connect and specify how the gateway authenticates
Enter a name for the gateway (up to
The name is case-sensitive and must be unique. Use only letters,
numbers, spaces, hyphens, and underscores.
For a firewall that is in multiple virtual
system mode, the
is the virtual
system (vsys) where the GlobalProtect gateway is available. For
a firewall that is not in multi-vsys mode, the
does not appear in the GlobalProtect Gateway dialog.
you save the gateway configuration, you cannot change the
Network Settings Area
Select the name of the firewall interface
that will serve as the ingress interface for remote endpoints. (These
interfaces must already exist.)
not attach an interface management profile that allows Telnet, SSH,
HTTP, or HTTPS to an interface where you have configured a GlobalProtect
portal or gateway because this will expose the management interface
to the internet. Refer to Best Practices for Securing Administrative Access for
more details on how to protect access to your management network.
) Specify the IP address
for gateway access. Select the
IP Address Type
then enter the
IP address type can be
(IPv6 traffic only), or
IPv4 and IPv6
your network supports dual-stack configurations, where IPv4 and IPv6
run at the same time.
The IP address must be compatible
with the IP address type. For example, 172.16.1.0 for IPv4 or 21DA:D3:0:2F3b
for IPv6. If you choose