Like IPSec VPN, in GlobalProtect VPN, you need to create a zone for the tunnel interface. Make sure you put your Public IP address on the Common Name field.Ĭreating a zone for GlobalProtect VPN Traffic Now, just fill the Certificate filed as per the reference Image. To generate a self-sign certificate, Go to Device > Certificate Management > Certificates > Device Certificates > Generate. So, you can generate your certificate on the Palo Alto firewall or you can use any certificate which is signed by any of the CA authority. To configure the GlobalProtect VPN, you must need a valid root CA certificate. Generating a Self Sign Certificate for GlobalProtect

You can skip any step if you have already knowledge related to a particular step. I am starting the configuration with basic steps.

Steps need to configure GlobalProtect VPN A client on the Branch site can access corporate resources using the GlobalProtect VPN. Clients need to connect their GlobalProtect to this public IP address. 101.1.1.2) which is assigned on the Palo Alto Firewall interface. In this article, we will use a Public IP address (i.e.

Video Guide to Configure GlobalProtect VPN on Palo Alto Networks Firewall.

Verification of GlobalProtect Configuration and Accessing defined Routes from Client Machine.

Gateway Configuration for GlobalProtect.

Creating a tunnel interface for GlobalProtect.

Creating a zone for GlobalProtect VPN Traffic.

Creating Authentication Profile for GlobalProtect VPN.

Creating Local Users for GlobalProtect VPN Authentication.

Generating a Self Sign Certificate for GlobalProtect.

Steps need to configure GlobalProtect VPN.

Palo alto globalprotect vpn download