Deploy GlobalProtect Gateways on AWS

Table of Contents

Components of the GlobalProtect Infrastructure

Deploy GlobalProtect Gateways on AWS

Deploy and configure GlobalProtect gateways to protect the applications on AWS.

Where Can I Use This?	What Do I Need?
AWS	AWS account Amazon Machine Image (AMI) ID VM-Series License (PAYG or BYOL) VM-Series plugin Panorama Panorama plugin for AWS

To secure mobile users, in addition to deploying and configuring the GlobalProtect gateways on AWS, you need to set up the other components required for this integrated solution. The following table includes the recommended workflow:

Deploy the VM-Series firewall on AWS.

See Deploy the VM-Series Firewall on AWS.
Configure the firewall at the corporate headquarters.
In this use case, the firewall is configured as the GlobalProtect portal and the LSVPN gateway.
Set up a template on Panorama for configuring the VM-Series firewalls on AWS as GlobalProtect gateways and LSVPN satellites.
To easily manage this distributed deployment, use Panorama to configure the firewalls on AWS.
- Create template(s) on Panorama.
Then use the following links to define the configuration in the templates.
- Configure the firewall as a GlobalProtect gateway.
- Prepare the satellite to join the LSVPN.
Create device groups on Panorama to define the network access policies and internet access rules and apply them to the firewalls on AWS.
See Create device groups.
Apply the templates and the device groups to the VM-Series firewalls on AWS, and verify that you have configured the firewalls properly.
Deploy the GlobalProtect client software.
Every end-user system requires the GlobalProtect agent or app to connect to the GlobalProtect gateway.
See Deploy the GlobalProtectclient software.

Components of the GlobalProtect Infrastructure

Resource Monitoring on AWS

VM-Series Firewall Docs

Deploy GlobalProtect Gateways on AWS

VM-Series Firewall Docs

Deploy GlobalProtect Gateways on AWS

Activation and Onboarding

Next-Generation Firewalls

Cloud-Delivered Security Services

Network Security

Endpoints

Resources