GlobalProtect VPN Paloalto passo a passo (NGFW 2025) - Portal, Gateway, Certificados e Teste

Learn how to configure GlobalProtect (SSL VPN) on Palo Alto NGFW from scratch: Portal, Gateway, certificates, authentication (Local DB/SAML/LDAP), Split Tunnel, and policies. Architecture: Portal vs. Gateway (internal/external) and authentication flow Certificate generation/use and SSL/TLS Service Profile Portal creation (Client Config, agent, optional IPS/hip-objects) Gateway creation (tunnel interface, split tunnel, DNS, and route) Security policies, NAT, and logical zones (gp-tunnel) Installation and testing with the GlobalProtect App (Windows) Validation with App-ID, logs, counters, and troubleshooting Chapters below to navigate: 00:00 Introduction 00:18 Showing the topology and what is already configured 02:38 Starting by creating certificates 05:30 Creating SSH/TLS Profile 06:00 AD and LDAP in the server profile 07:32 Configuring the Authentication Profile 08:50 Creating Tunnel, Zone, and User-ID 10:05 GP - VPN Portal 13:00 Optional - Local database for VPN (without AD) 13:46 GP - VPN Gateway 16:00 Commit and explanation of the test 16:33 Important information about GlobalProtect Client in the lab 17:23 Accessing the Portal from an external Windows machine 18:24 User test on the portal 19:38 Installing Global Protect and discussing the certificate 20:06 Connecting to the VPN and installing the certificate 20:56 Showing connected logs 21:37 Leave your like, guys! If this video helps you, leave a like and comment which lab you want to see next! 🔔 Subscribe for more Palo Alto labs, networking, and certifications.