The comment will appear in the system logs of the firewall when thi suser logs on next.

Enabling Agent user override - 'with-comment' allows users to disable the agent after entering a reason/comment.

contains important info regarding what users can or cannot do with the GP Agent.

Add the IP address of the external interface as the External Gateways (on the right).

Give the client config a name (EX: 'config-gp').

ONLY ONE OPTION SHOULD BE SELECTED, NOT BOTH. Requires that the user manually connect when access to the VPN is necessary.Means the user credentials will be pulled automatically from the windows logon information and used to authenticate the GP client user, when they first log into their Windows PC.for iOS devices to connect, XAUTH configuration.OPTIONAL: NAT policy for GP clients to go out to the internet (if split tunneling is NOT enabled).Security and NAT policies permitting traffic between the GP client and trust.In some cases between GlobalProtect clients and the untrust zones) Routing between the trust zones and GlobalProtect clients.GlobalProtect Client downloaded and activated on the PAN firewall.(OPTIONAL) GlobalProtect Client certificate.Will not need license for 1 external gateway or 1 portal. Required for: iOS and Android App and HIP Check (host information profile).Gateway Subscription = 1 or 3 year subscription.Required for: HIP check (host information profile), multiple external gateways, and internal gateways.GlobalProtect Portal License = 1 time license.GlobalProtect AGENT = Agent software on the laptop that is configured to connect to the GP deployment.Can be internal (in the LAN) or external (where deployed/reached via internet). GlobalProtect GATEWAY = provides security enforcement for traffic from the GP Agent, 1 or more interfaces on 1 or more PAN firewalls.GlobalProtect PORTAL = maintains the list of all Gateways, certificates used for authentication, and the list of categories for checking the end host.

Configure Tunnel Interface and attach Security Zone to it: Configuring User Active Directory authentication profile:

Globalprotect pre logon