What do you get with the GlobalProtect subscription that you don't get with the FW OOB?

VPN
1

From what I understand, the Palos (PA-450 for example) come with GlobalProtect VPN for end users. There’s also a Globalprotect subscription that you can buy, suggesting that there’s extra features you can get.

Is there a list of what the extra features are and what comes with the firewall itself with panOS? Currently I was only planning on getting the Professional bundle.

What I’m currently looking to do with GlobalProtect is have VPN clients and enforce them being used and connected on laptops.

2

https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-overview/about-globalprotect-licenses.html

That should contain all the info you need.

3

The GP subscription allows for collection of HIP data, mobile device support, Clientless VPN, split tunneling based on domain/process/video AppID, IPv6 support, and Linux support.

4

Or you can go with the cloud worldwide global protect.

Look it up, its called Prisma Access - https://www.paloaltonetworks.com/sase/access

5

By Clienteles VPN, you mean like the built-in Windows 10 VPN using SSTP? Can it do Always On?

edit: the split tunnel based on services could be useful since you dont really need to inspect streaming of videos and things like that.

6

Clientless, as in, web proxying. It lets you designate internal (or external) websites and make them available to authenticated users without publishing those websites to the broad internet.