Hardware reference guide

6 GlobalProtect Administrator’s Guide
About GlobalProtect Licenses GlobalProtect Overview
About GlobalProtect Licenses
If you simply want to use GlobalProtect to provide a secure, remote access or virtual private network (VPN)
solution via a single, external gateway, you do not need any GlobalProtect licenses. However, to use some of the
more advanced features, such as multiple gateways, mobile apps, mobile security management, host information
checks, or internal gateways, you may need to purchase one or more of the following licenses:
 Portal license—A one-time perpetual license that must be installed on the firewall running the portal to
enable internal gateway support, multiple gateways (internal or external), and/or HIP checks.
 Gateway subscription—An annual subscription that enables HIP checks and associated content updates.
This license must be installed on each firewall running a gateway(s) that performs HIP checks. In addition,
the gateway license enables support for the GlobalProtect mobile app for iOS and Android.
 GlobalProtect Mobile Security Manager Capacity License on the GP-100 appliance—A one-time
perpetual license for the Mobile Security Manager based on the number of mobile devices to be managed.
This license is only required if you plan to manage more than 500 mobile devices. Perpetual licenses are
available for up to 1,000, 2,000, 5,000, 10,000, 25,000, 50,000, or 100,000 mobile devices.
 GlobalProtect Mobile Security Manager WildFire subscription on the GP-100 appliance—Used with
GlobalProtect Mobile Security Manager for detecting APK malware on managed Android devices. To enable
malware detection for use with the GlobalProtect Mobile Security Manager, you must purchase a WildFire
subscription that matches the capacity of your GlobalProtect Mobile Security Manager license.
See Activate Licenses for information on installing licenses on the firewall. See Activate/Retrieve the Licenses
for information on installing licenses on the Mobile Security Manager.