How to configure GlobalProtect Portal to deliver On-Demand and Pre-logon connection methods for the respective user or user group

How to configure GlobalProtect Portal to deliver On-Demand and Pre-logon connection methods for the respective user or user group

18789
Created On 09/26/18 13:52 PM - Last Modified 07/11/25 08:52 AM


Symptom


How to configure GlobalProtect Portal to deliver different connection methods to different users or user groups.

Environment


  • NGFW
  • Supported PANOS versions
  • GlobalProtect Portal

Resolution


 

  1. Go to Network > GlobalProtect > Portals and select the desired portal.
  2. Go to Agent and add a new agent config. Under Config Selection Criteria add the User or the User Group that need the on-demand access. Go to the App tab, Connect Method and select 'On-demand (Manual user initiated connection)'.
  3. Go to Agent and add a second agent config. Under Config Selection Criteria add the User or the User Group that need the pre-logon access. Go to the App tab, Connect Method and select 'Pre-logon (Always On)'.
  4. Go to Agent and add a third agent config. Under Config Selection Criteria select 'pre-logon' User. Go to the App tab, Connect Method and select 'Pre-logon (Always On)'.
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClwYCAS&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language