Palo Alto GlobalProtect with Pre-Logon [2024]

#paloaltofirewall #paloaltonetworks #firewall

In this tutorial you're going to learn how to configure remote access VPN on the Palo Alto Firewall using the pre-logon method. With this method, the devices are able to connect to your corporate network securely, even before the users sign in.

I will explain to you all the steps needed on the Palo Alto Firewall to configure the remote access VPN, including the generation of certificates. At the end I will use a Windows client in the Internet to test the VPN connection with the GlobalProtect app to a linux server. I will also show you how you can interpret the Firewall logs during and after the pre-logon phase.

If you have questions, suggestions, or any kind of feedback, please don't hesitate to comment below! I will reply as soon as possible.

Timeline:

00:00 Palo Alto Globalprotect Pre-Logon
01:02 Overview
02:11 Interface configuration
03:44 Authentication
05:10 Certificates
11:25 GlobalProtect Gateway
15:06 GlobalProtect Portal
18:45 GlobalProtect Client
20:33 Security Policies
28:34 Tests with VPN client