nerdexam
Palo_Alto_NetworksPalo_Alto_Networks

PCNSE · Question #477

PCNSE Question #477: Real Exam Question with Answer & Explanation

The correct answer is C: GlobalProtect portal. GlobalProtect Clientless VPN is configured on and delivered through the GlobalProtect Portal. The portal hosts the Clientless VPN web interface, defines which internal applications (web apps, RDP, SSH) are accessible, and enforces authentication before granting browser-based acce

Submitted by skyler.x· Apr 18, 2026Deploy and Configure

Question

Which GlobalProtect component must be configured to enable Chentless VPN?

Options

  • AGlobalProtect satellite
  • BGlobalProtect app
  • CGlobalProtect portal
  • DGlobalProtect gateway

Explanation

GlobalProtect Clientless VPN is configured on and delivered through the GlobalProtect Portal. The portal hosts the Clientless VPN web interface, defines which internal applications (web apps, RDP, SSH) are accessible, and enforces authentication before granting browser-based access. Users connect to the portal URL with a browser, authenticate, and are presented with the published Clientless VPN applications. The GlobalProtect Gateway handles full-tunnel VPN connections for the installed agent. The GlobalProtect App (client) is explicitly not required for Clientless VPN. The GlobalProtect Satellite is used for large-scale branch connectivity. Therefore, the Portal is the only component that must be configured to enable Clientless VPN.

Topics

#GlobalProtect#Clientless VPN#VPN components#Portal configuration

Community Discussion

No community discussion yet for this question.

Full PCNSE PracticeBrowse All PCNSE Questions