topic Meaning of GP app setting "Have User Accept Terms Of Use before Creating Tunnel" in GlobalProtect Discussions

Meaning of GP app setting "Have User Accept Terms Of Use before Creating Tunnel"

Deepak25 — Sun, 19 Dec 2021 14:13:56 GMT

What is the meaning of GP app setting "Have User Accept Terms Of Use before Creating Tunnel" , for which purpose this option is useful ?

Re: Meaning of GP app setting "Have User Accept Terms Of Use before Creating Tunnel"

mkroell1 — Sat, 19 Mar 2022 20:46:47 GMT

I would like to understand this setting as well.

Re: Meaning of GP app setting "Have User Accept Terms Of Use before Creating Tunnel"

GregTaylor — Wed, 27 Sep 2023 16:56:50 GMT

Agreed, the setting doesn't seem to change any behavior, despite the documentation - https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-web-interface-help/globalprotect/network-globalprotect-portals/globalprotect-portals-agent-configuration-tab/globalprotect-portals-agent-app-tab

Re: Meaning of GP app setting "Have User Accept Terms Of Use before Creating Tunnel"

EddieJimenez — Tue, 02 Sep 2025 21:12:02 GMT

I found that on version 11.1.6 this works as intended.

You must have a welcome page configured on the firewall. The default welcome page, found in Device -> Response Pages -> GlobalProtect App Welcome Page can be exported and customized to suite your requirements. In my case I uploaded and pushed it with panorama after exporting it from the local firewall to customize.

Then you can select the GlobalProtect App Welcome Page from the GlobalProtect Portal configuration. This can be found in Network -> Portals -> PortalName -> Agent -> AgentConfig -> App -> Welcome Page (on the right side of the configs window). Additionally under the App Configuration Section of the Configs window, you need to set "Have User Accept Terms Of Use before Creating Tunnel" to Yes.

These changes will result in a pop-up window appear to a user after they authenticate to Global Protect. It will prompt them to click I Agree or Decline. In my testing, you must click I Agree to establish a tunnel.

Here is what the window looks like.

Hope this helps.