GlobalProtect VPN and Remote Access Flashcards

Which GlobalProtect component is responsible for authenticating remote users before they connect to the internal network?

Answer: GlobalProtect Portal

The GlobalProtect Portal authenticates remote users and distributes configuration and certificates to the GlobalProtect Agent.

What is the purpose of Host Information Profile (HIP) in GlobalProtect?

Answer: To collect and report endpoint security posture data

HIP collects endpoint security posture data such as OS patch level and antivirus status, enabling policy enforcement based on device health.

Which GlobalProtect connection method allows users to connect without initiating the connection themselves?

Answer: Pre-Logon

Pre-Logon establishes a VPN tunnel before the user logs in, using machine certificates for authentication.

In GlobalProtect, what is split tunneling used for?

Answer: Routing only specific traffic through the VPN tunnel

Split tunneling directs only specified destination traffic through the VPN tunnel while other traffic goes directly to the internet.

Which authentication method can GlobalProtect use to verify user identity alongside username and password?

Answer: MFA via RADIUS or SAML

GlobalProtect supports multi-factor authentication (MFA) by integrating with RADIUS or SAML identity providers.

What happens when a HIP check fails in a GlobalProtect deployment with policy enforcement enabled?

Answer: The user is placed in a quarantine zone with restricted access

When a HIP check fails, the firewall can apply a separate security policy that quarantines or restricts the non-compliant endpoint.