Hardware reference guide

GlobalProtect Administrator’s Guide 149
GlobalProtect Quick Configs Remote Access VPN (Certificate Profile)
Step 7 Configure the GlobalProtect Portal.Select Network > GlobalProtect > Portals and add the following
configuration:
1. Set Up Access to the Portal:
Interface—ethernet1/2
IP Address—199.21.7.42
Server Certificate—GP-server-cert.pem issued by Go Daddy
Certificate Profile—GP-client-cert
2. Create a GlobalProtect Client Configuration:
Connect Method—on-demand
External Gateway Address—gp.acme.com
Step 8 Deploy the GlobalProtect Agent
Software.
Select
Device > GlobalProtect Client.
In this example, use the procedure to Host Agent Updates on the
Portal.
Step 9 (Optional) Enable use of the
GlobalProtect mobile app.
Purchase and install a GlobalProtect Gateway subscription
(
Device > Licenses) to enable use of the app.
Step 10 Save the GlobalProtect configuration. Click
Commit.
Quick Config: VPN Remote Access with Client Certificate Authentication (Continued)