Summary

In this chapter, we learned how SAML authentication can be leveraged to replace more traditional authentication methods. We learned how user-initiated pre-logon and always-on pre-logon can be set in GlobalProtect so that endpoints are connected before the user is logged onto the desktop environment. This knowledge will help provide your users with a more integrated and smoother environment, while also ensuring the endpoints are secured the moment they are booted up until they are shut down.

In the next chapter, we will investigate different ways of establishing a site-to-site VPN and how to troubleshoot problems connecting to sites, as well as an alternative means of connecting to remote sites using a hybrid GlobalProtect solution called satellites or Large-Scale VPN (LSVPN).