Select Network > GlobalProtect > Clientless App Groups to group applications that are accessible through the GlobalProtect Clientless VPN. You can add existing clientless applications to a group or configure new clientless applications for the group. Groups are useful for working with multiple applications at the same time. For example, you might have a standard set of SaaS applications (such as Workday, JIRA, or Bugzilla) that you want to configure for Clientless VPN access.
For a firewall that is in multiple virtual system mode, the Location is the virtual system (vsys) where the GlobalProtect gateway is available. For a firewall that is not in multi-vsys mode, the Location field does not appear in the GlobalProtect Gateway dialog. After you save the gateway configuration, you cannot change the Location. Add an Application from the drop-down or configure a new clientless application and add it to the group. To configure a new clientless application, refer to Network > GlobalProtect > Clientless Apps.