====== Configuration for the VPN-OUT GlobalProtect service ======

[[pub:conf-vpn-out-paloalto|Italian Version]]

The VPN-OUT service allows the access to the internal network resources of the University and allows the client to present itself to the outside with an University IP address, even when connected from the outside (ADSL, other institutions, ecc.).

  * **NOTE**: Students can connect with the VPN-OUT service only from external networks, **not** from the inside of the University network.

To use the service, you can follow the same instructions for the "classic" VPN service [[pub:conf-vpn-paloalto-en|VPN Configuration]] using as connection Portal (when asked to configure it)

<code>vpn-out.icts.unitn.it</code>

instead of <code>vpn.icts.unitn.it</code>

If you already have the GlobalProtect client installed on your PC, you can add another connection profile following these instructions: [[pub:conf-vpn-out-paloalto-newprofile-en|Adding a new VPN connection profile]]


===== VPN-OUT service characteristics =====

==== IP address assigned to the client ====

The clients will get an IP address in this range: 10.31.116.1 to 10.31.117.254

==== Traffic Flow ====

When the VPN connection is establishied, ALL the client traffic will be forwarded through the tunnel, the traffic destined to the internet public network will be NATted with an Univeristy IP address.