Where to change the default behavior of Global Protect when deploying through Group Policy?
9497
Created On 07/25/19 04:11 AM - Last Modified 08/07/25 17:44 PM
Question
For Example, when deploying Global Protect (GP) using Windows Group Policy, the GP Client tries to connect using the default setting as 'user-logon'. This happens right when the GP Agent installation completes.
Environment
- PAN-OS 8.0
- GlobalProtect Agent
- GlobalProtect Portal
Answer
Connect-method setting for the GP can be changed to 'on-demand'.
The document, GlobalProtect Administrator's Guide, Agent Behavior Options, includes a table that lists the options to configure in the Windows registry and Mac plist. This is to customize the behavior of the GlobalProtect agent.