– Base 64embedded Client certificate that allows client to authenticate itself when connecting to gw – Host information data collection, reports OS version, AV version, disk encryption, specified registry keys/value etc – DNS name/IP mapping thah client uses to determine if the PC is inside or outside
Portal sends configuration and Client Certificate to the Client, cfg contains following: Configure client options with usernam/password and name of portal The user is prompted to download the Client Software supports OSX or Windows Users make an SSL connection to the portal and authenticate As it is a client installed on to the users computer. GP could be compared to Microsofts DirectAcces and it is a very good competitor. That means every package demanded by the client will be reviewed by the firewall. Users network traffic is gated through the Palo Alto and then out on internet. With GP, users are protected against threats even when they are not on the enterprise network. GlobalProtect provides security for computers that are used in the field by allowing easy and secure login from anywere in the world. When you chose to upgrade to 4.1 you are forced to leave your current setup of SSL VPN and it will turn in to Palo Altos Premium VPN called GlobalProtect. This is an addressed issue and it’s fixed in 4.1.4 as I am running now. The update however messed up things in committing stage and generated errors. However there were some pleasant features in 4.1 like better ways of committing configuration, faster GUI, Premium Version of VPN setup etc. Last month Palo Alto released a “Stable” version of 4.1.x update 4.1.3, we were still on 3.1.9 and it worked fine.
0 kommentar(er)
