What it does
GlobalProtect connects a mobile workforce through Palo Alto Networks firewalls or Prisma Access, with identity authentication and device-health policies.
GlobalProtect ties remote access to an organization's Palo Alto infrastructure. Its official page lists authentication options such as SAML, LDAP, RADIUS and client certificates, alongside device-posture assessment. Those are the controls to plan before rolling the client out to a workforce. The page also describes a configuration that keeps the app disconnected if the IPsec tunnel fails, which matters where policy requires that behavior. Users need their organization's authorized gateway and enrollment details.
Strengths
- Several enterprise authentication methods
- Device-posture checks
Best for
- Workforces using Palo Alto Networks remote-access gateways
Sources
- Secure Remote Access | GlobalProtect - Palo Alto Networks (Oct 26, 2026)