topic Different agent configs Problem in GlobalProtect Discussions

Different agent configs Problem

JGriessmeier — Mon, 08 Aug 2022 11:44:33 GMT

Hi there,

we have global protect with different agent configs based on ad groups enrolled.

We have different configs for always on and always on disable on demand

since the upgrade to global protect 6.0.3 some users seems to get a different config (always on instead of disable on demand)

in PANOS 9.0 you could see in the system logs of the firewall which config was chosen.

in panos 10.1 i don't see this info under the global protect logs.

is there any possibility (e.g. cli) to see the config, the user gets on login?

Thanks

Re: Different agent configs Problem

BPry — Wed, 10 Aug 2022 01:59:44 GMT

@JGriessmeier,

You should see this under the GlobalProtect logs under ( eventid eq gateway-getconfig ). You'll need to make sure that you have the description column toggled so that you actually see that information, but it should all be there for every single client.

Re: Different agent configs Problem

JGriessmeier — Wed, 10 Aug 2022 05:35:19 GMT

@BPry Thanks.

thats exactly what i searched for.

i tried to figure out wich coloumn it is, but description was too easy