Difference between revisions of "GlobalProtect (Palo Alto)"

From wikieduonline
Jump to navigation Jump to search
Tags: Mobile web edit, Mobile edit
 
(59 intermediate revisions by 2 users not shown)
Line 1: Line 1:
−
{{Draft}}
+
[[Palo Alto]] GlobalProtect is an always-on [[SSL]]/[[IPsec]] [[VPN]] solution with [[MFA]] authentication included on [[PAN-OS]] firewall devices.
 +
[[Port]] [[UDP]] [[4501]] is used by [[IPsec]] for the data communication between the [[GlobalProtect]] client and the firewall
  
  
 +
* Client supported platforms: [[iOS]], Android, Windows and [[macOS]]
  
 +
 +
* [[GlobalProtect Application Command Center]] (ACC)
 +
* [[Prisma Access]] (formerly GlobalProtect cloud service)
 +
* [[GlobalProtect Agent]]
 +
 +
== Versions ==
 +
10.1
 +
* [[Globalprotect]]: ability to enforce a shorter [[inactivity]] logout period.
 +
 +
9.1
 +
* GlobalProtect Activity charts and graphs on the [[ACC]]
 +
* [[Log Forwarding]] of [[GlobalProtect logs]]
 +
 +
9.0
 +
 +
See also: [[PAN-OS Releases]]
 +
 +
== Features ==
 +
* [[Multi-factor authentication]] (MFA) methods, including [[one-time password]] tokens, certificates, and smart cards, through [[RADIUS]] and [[SAML]] integration
 +
* [[Traffic Inspection]]
 +
** Identifies application traffic, regardless of port number
 +
** [[SSL]] Decryption
 +
* [[URL filtering]] with [[PAN-DB]]
 +
* [[GlobalProtect]] ([[PAN-OS 10.0]]) blocks compromised devices using unique attributes, such as the hardware serial number of the device and unique host information.
 +
 +
== Related commands ==
 +
{{GlobalProtect commands}}
 +
 +
== Activities ==
 +
* Read GlobalProtect Administration Guide: https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/globalprotect/9-1/globalprotect-admin/globalprotect-admin.pdf
 +
* Read https://ninjamie.fandom.com/wiki/GlobalProtect
 +
* Read GlobalProtect Resource List on Configuring and Troubleshooting https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClfXCAS
 +
 +
== Related terms ==
 +
* [[HIP]]. If the Host Information Profile (HIP) feature is enabled, the gateway generates a HIP report from the raw host data that the endpoints submit, which it can use for [[policy enforcement]].
 +
* [[Prisma Cloud]]
  
 
== See also ==
 
== See also ==
 +
* {{GlobalProtect}}
 +
* {{VPN}}
 
* {{PAN-OS}}
 
* {{PAN-OS}}
 +
* {{Palo Alto}}
 +
* {{firewalls}}
  
−
 
+
[[Category:GlobalProtect]]
 
[[Category:Firewalls]]
 
[[Category:Firewalls]]

Latest revision as of 08:18, 26 November 2021

Palo Alto GlobalProtect is an always-on SSL/IPsec VPN solution with MFA authentication included on PAN-OS firewall devices. Port UDP 4501 is used by IPsec for the data communication between the GlobalProtect client and the firewall


  • Client supported platforms: iOS, Android, Windows and macOS


Versions[edit]

10.1

9.1

9.0

See also: PAN-OS Releases

Features[edit]

Related commands[edit]

current-satellite Show current GlobalProtect gateway satellites
current-user Show current GlobalProtect gateway users
flow Show dataplane GlobalProtect gateway tunnel information
flow-site-to-site Show dataplane GlobalProtect site-to-site gateway tunnel information
gateway Show list of GlobalProtect gateway configuration
previous-satellite Show previous GlobalProtect gateway satellites
previous-user Show previous user session for GlobalProtect gateway users

Activities[edit]

Related terms[edit]

  • HIP. If the Host Information Profile (HIP) feature is enabled, the gateway generates a HIP report from the raw host data that the endpoints submit, which it can use for policy enforcement.
  • Prisma Cloud

See also[edit]

  • ↑ https://weberblog.net/cli-commands-for-troubleshooting-palo-alto-firewalls/
    • Retrieved from "https://www.wikieduonline.com/index.php?title=GlobalProtect_(Palo_Alto)&oldid=102057"

    Advertising: