1. Agenda
Create certificates for the GlobalProtect Portal, internal gateway, and external gateway.
Attach certificates to a SSL-TLS Service Profile.
Configure the Server Profile and Authentication Profile to be used when authenticating users.
Create and configure the tunnel interface to be used with the external gateway.
Configure the internal gateway, external gateway, and portal.
Host the GlobalProtect agent on the portal for download.
Create a No-NAT policy rule to ensure that portal traffic is not subjected to network address translation.
Test the external gateway and internal gateway.

2. Prerequisite for Global Protect
Self Signed Certificates generated on Firewall for SSL portal
Must have user created locally or from AD

3. Create a VPN zone & Enable user Identification
Network>zone>add

4. Create a VPN tunnel interface
Network>interface>add>Tunnel>Add

5. Create SSL/TLS Profile to attach Self-singed Certificate

6. Create Global Protect Gateway
Network>Globalprotect>Gateways>Add

7. Click on authentication Tab & attach SSL/TLS service profile & LOCAL_AUTH_PROFILE
Introduction To Fortinet

8. Under AGENT tab attach tunnel interface, enable IPSec security, define POOL of IP address & the server IP address to communicate with
Introduction To Fortinet

9. Introduction To Fortinet
Again Click On Ok

10. Network>GlobalProtect>Portal>Add
Now Create a portal, We need a portal to connect through username & password, and to download client.
Network>GlobalProtect>Portal>Add
Introduction To Fortinet

11. Introduction To Fortinet
Again press Ok , Ok

12. Now Create Security Policy Rule to communicate from VPN Tunnel to LAN Zone Server.
Introduction To Fortinet

13. Now Global Protect Client Software should be uploaded on firewall
Device>GlobalProtect Client>Upload
Note:- Client software will not get uploaded because of no license
Introduction To Fortinet