Palo GlobalProtect Gateway for VM-300 - subscription license (3 years) - 1 device in HA pair

GlobalProtect Gateway delivers mobile threat prevention and policy enforcement based on apps, users, content, device and device state. VPN connections terminate at the GlobalProtect Gateway, which provides consistent enforcement of policy and threat prevention for Internet and corporate traffic. The gateway uses apps, users, content, device and device state as policy enforcement criteria.

Key Points

• A logical perimeter protects roaming users
• Standardized control over users and devices
• VPN secure remote access
• Built-in intelligence delivers superior user experience

Product Features

• A logical perimeter protects roaming users
  GlobalProtect expands the boundaries of the physical network, effectively establishing a logical perimeter that encompasses remote laptop and mobile device users irrespective of their location. When a remote user logs into the device, GlobalProtect automatically determines the best gateway available and establishes a secure connection. Laptop and mobile devices will stay connected to the corporate network at all times, and protected as if they never left the corporate campus.
• Standardized control over users and devices
  GlobalProtect ensures that the same secure application enablement policies that protect users at the corporate site are enforced for all users, independent of their location. As a result, the operational challenges associated with creating and managing separate policies for corporate firewalls and remote users are eliminated. In addition to policy criteria of applications, users and content, GlobalProtect enables administrators to also set policy based on the health or status of the device.
• VPN secure remote access
  GlobalProtect enables remote users to access the corporate network by automatically establishing either an SSL or IPSec-based VPN connection depending on location and configuration. The remote access connection is authenticated through one of several mechanisms and once the secure remote connection is established, users are protected by the same security policies as corporate users.
• Built-in intelligence delivers superior user experience
  Designed to be as non-intrusive as possible, GlobalProtect automatically discovers the optimal gateway for a given location, confirms the security policy and establishes a network connection using single sign-on. The end result is a superior and transparent user experience that is consistent, regardless of the location.