GlobalProtect VPN and Remote Access Flashcards

Which protocol does GlobalProtect primarily use to establish its VPN tunnel?

Answer: IPsec

GlobalProtect uses IPsec (with SSL as a fallback) to establish encrypted VPN tunnels between the agent and gateway.

What is the role of the GlobalProtect Gateway?

Answer: To terminate VPN tunnels and enforce security policy for remote users

The GlobalProtect Gateway terminates the IPsec/SSL VPN tunnel and applies security policy to inbound remote user traffic.

Which feature allows GlobalProtect to dynamically select the best gateway based on response time?

Answer: Automatic Gateway Selection

Automatic Gateway Selection measures response times from multiple gateways and connects the agent to the fastest one.

What type of certificate is required on the GlobalProtect Portal for secure client connections?

Answer: A certificate trusted by the client machine or browser

The portal certificate must be trusted by the connecting client to prevent certificate warnings and ensure secure connections.

In a large enterprise GlobalProtect deployment, what is the recommended approach for scaling gateway capacity?

Answer: Deploy multiple gateways in different geographic locations

Deploying multiple geographically distributed gateways distributes load and reduces latency for remote users worldwide.

Which GlobalProtect feature enables seamless user authentication using Windows credentials without prompting the user?

Answer: SSO (Single Sign-On) with Windows credentials

SSO allows GlobalProtect to use Windows domain credentials so users authenticate to the VPN automatically at Windows login.