topic Block uninstall Global Protect in GlobalProtect Discussions

Block uninstall Global Protect

Avazquez1 — Wed, 10 Nov 2021 19:07:51 GMT

Hello people!

I need to block 'uninstall' Global Protect agent property on my employees' Windows computers.
Recently users uninstalled the agent without administrator authorization.
Is there a way to do it?

Thank you everyone.

Re: Block uninstall Global Protect

AnalysisMan — Wed, 10 Nov 2021 21:09:07 GMT

There is an option that you can do that in the GP Portal settings.
Network -> GlobalProtect -> Portals -> click the portal name -> Agent -> click the Config.

Find the 'App' tab on the Configs.

Click the App Configurations called 'Allow User to Uninstall GlobalProtect App'.
There are three options: Allow, Disallow, Allow with Password.

Please see the following document for more details.
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/globalprotect/network-globalprotect-portals/globalprotect-portals-agent-configuration-tab/globalprotect-portals-agent-app-tab.html

Re: Block uninstall Global Protect

Avazquez1 — Wed, 10 Nov 2021 21:42:36 GMT

Thank you!