Users tend to find VPN solutions restrictive or tedious to use, restrictive is the main complaint at least that I meet in the market when working with clients. In an ideal world you would have users devices always connected to you VPN solution so that these can benefit from all the feature you Palo alto networks firewall has to offer within security, features like URL filtering to Wildfire and the ability catch and block zero day exploits, however that is just an ideal scenario. Luckily Palo alto networks firewalls happens to be just that! However, this feature is quite popular to be used with firewalls as well, at least with the modern Next generation firewalls. Normally you use Radius and NPS along with 802.1x solutions where you put un-compliant clients in a remediation network till they get compliant before they can join the production network.

For those of you have been in the game for some time might find some resemblance with Microsoft’s Network Policy Server (NPS) which you can utilize along with a Radius server to perform health checks and then either allow or disallow clients to join the network.

Today we will be focusing hos Palo alto network firewalls Host information profile (HIP).

Palo alto globalprotect setup