GlobalProtect by Palo Alto Networks: A Guide to Secure Remote Access
GlobalProtect is Palo Alto Networks’ security solution for connecting users and devices to an organisation’s network. It is commonly used to provide secure access for employees working remotely, travelling or connecting from different office locations.
Rather than treating remote access as a standalone VPN connection, GlobalProtect can work with an organisation’s wider security policies. This helps IT teams manage who can connect, which resources they can reach and how access is protected.
How GlobalProtect works
GlobalProtect is typically managed through a Palo Alto Networks firewall or related security infrastructure. Users connect through the GlobalProtect app, which communicates with configured network components. Two key terms are:
- Portal: Provides the app with connection settings and configuration information.
- Gateway: Establishes the user’s connection and applies relevant access and security policies.
The exact setup depends on an organisation’s network design and licensing. Administrators can configure access to suit different user groups, devices and locations.
Key benefits
- Secure remote connectivity: Helps protect connections between users and organisational resources.
- Centralised policy management: Gives IT teams a way to apply access rules consistently.
- Support for different working locations: Can help provide a consistent connection experience for users in the office or working remotely.
- Integration with security controls: When configured as part of a Palo Alto Networks environment, remote access can be governed alongside other network security policies.
Deployment considerations
A successful GlobalProtect deployment requires more than installing the app. Organisations should plan how users will authenticate, which systems they need to access and what security requirements apply to their devices. It is also important to consider firewall capacity, network routing, certificate management and the experience for users connecting from outside the organisation.
Before deployment, IT teams should test the configuration with representative users and devices. Clear instructions can help users install the app, connect to the correct portal and report common issues. Administrators should also review logs and connection policies regularly to identify problems and maintain appropriate access.
Security and best practice
GlobalProtect is one part of an organisation’s security approach; it does not remove the need for wider safeguards. Strong authentication, least-privilege access, timely software updates and well-maintained endpoint protection remain important. Organisations should also review who has access to sensitive systems and remove permissions when they are no longer needed.
Configuration options and available features can vary according to the organisation’s Palo Alto Networks products, software versions and licensing. For that reason, deployment decisions should be checked against current product documentation and the organisation’s security requirements.
Is GlobalProtect right for your organisation?
GlobalProtect may suit organisations already using Palo Alto Networks security products that need to provide managed remote access. The right solution depends on factors such as the number of users, network architecture, compliance obligations and the level of control required over devices and applications.
Careful planning, testing and ongoing administration help organisations make the most of GlobalProtect while keeping access secure and straightforward for users.
Essential Tips for Securely Using GlobalProtect with Palo Alto Networks
- Install GlobalProtect only from your organisation’s approved source.
- Use your organisation’s official portal address.
- Sign in with your work account and complete MFA.
- Choose the correct gateway if prompted.
- Keep the app and your device up to date.
- Connect before accessing internal services.
- Check your internet connection if the VPN will not connect.
- Restart GlobalProtect and try again before contacting support.
- Report unexpected sign-in prompts to your IT team.
Install GlobalProtect only from your organisation’s approved source.
Install GlobalProtect only from your organisation’s approved source, such as its IT portal or a link provided by your IT team. Unofficial downloads may be outdated, altered or unsafe, and could put your device or work data at risk. If you’re unsure where to get the app, check with your organisation’s IT support before installing it.
Use your organisation’s official portal address.
When using GlobalProtect, connect through your organisation’s official portal address, provided by your IT team or listed in its approved instructions. Avoid using links or addresses from unexpected emails, messages or search results, as these could lead to a fraudulent service. If you are unsure which portal to use, check with your IT support team before entering your login details.
Sign in with your work account and complete MFA.
To connect using Palo Alto Networks GlobalProtect, sign in with your work account and complete multi-factor authentication (MFA) when prompted. This extra verification helps protect your organisation’s network, even if your password is compromised. Never approve an MFA request you did not initiate; contact your IT support team if you have trouble signing in.
Choose the correct gateway if prompted.
If GlobalProtect prompts you to choose a gateway, select the one recommended by your organisation or IT team. The available gateways may connect you to different locations or resources, so choosing the correct one can help ensure a reliable connection and access to the systems you need. If you are unsure which gateway to use, check your organisation’s setup instructions or contact IT support.
Keep the app and your device up to date.
Keep the GlobalProtect app and your device’s operating system up to date. Updates can include security fixes, bug fixes and compatibility improvements, helping the app connect reliably and protecting your device against known vulnerabilities. Install updates promptly, following your organisation’s IT guidance, and restart your device if required.
Connect before accessing internal services.
Connect to GlobalProtect before opening internal websites, shared drives or business applications. Establishing the secure connection first helps ensure your device can reach the services you need and that access is protected by your organisation’s security policies. If a service does not load, check that GlobalProtect shows you as connected, then try again.
Check your internet connection if the VPN will not connect.
If GlobalProtect will not connect, first check that your internet connection is working by opening a website or reconnecting to your Wi-Fi. If other services are also unavailable, restart your router or try a different network. Once your connection is stable, open GlobalProtect and try again; if the problem continues, contact your IT support team.
Restart GlobalProtect and try again before contacting support.
If GlobalProtect will not connect, restart the app and try again before contacting support. Quit GlobalProtect completely, reopen it and attempt to connect once more; if the problem persists, note any error message and share it with your IT support team.
Report unexpected sign-in prompts to your IT team.
If you receive a GlobalProtect sign-in prompt that you weren’t expecting, don’t approve it or enter your details until you’ve checked that it’s genuine. Unexpected prompts can be a sign of a configuration issue or an attempt to access your account. Contact your IT team using your organisation’s usual support channel, and include details such as when the prompt appeared and what it said. Never share your password or verification code with anyone.