topic Re: Prevent users to add new portal in Gloabal Protect App in GlobalProtect Discussions

Prevent users to add new portal in Gloabal Protect App

dramchandani — Mon, 27 Nov 2023 22:29:08 GMT

Hello Community Members,

I am looking to restrict the users from adding any additional portal in the Global Protect App.

I know there is an option in Agent configuration that restricts users not to change the portal but that will limit users to only connecting to one portal.

We have multiple portals in our infra and we want users to give the flexibility to switch between 2-3 portals however users should not be able to add any new portals at all.

Does anyone know what configuration knob i need to configure?

Re: Prevent users to add new portal in Gloabal Protect App

reaper — Wed, 29 Nov 2023 11:49:40 GMT

you can set the "Enable Advanced View" to no, which will prevent them from tampering with the configuration, but allow them to switch portals

Re: Prevent users to add new portal in Gloabal Protect App

dramchandani — Fri, 01 Dec 2023 18:54:32 GMT

Thanks for your response, Looking at this KB article, it just controls the UI parameters but does not disable users to add a new portal.

Setting this flag to No, also poses another challenge that the user won't be able to collect dump or debug logs.

https://knowledgebase.paloaltonetworks.com/kCSArticleDetail?id=kA10g000000PPcc

Re: Prevent users to add new portal in Gloabal Protect App

reaper — Mon, 04 Dec 2023 13:36:45 GMT

they can't change what they can't see: the portal configuration is part of the advanced view so they wont be able to add/delete/change any of the portals

not sure about that article, but the disabled advanced view looks like this (no portals):

you're right they wont be able to get the log package, but you can still get the logs directly from the directory

Re: Prevent users to add new portal in Gloabal Protect App

L.Rozgon972321 — Mon, 24 Nov 2025 10:57:50 GMT

Sorry for reviving old thread, but this question still seems relevant.

Disabling advanced view doesn't block connections tab that allows users to add portal.

This functionality seems crucial to any corporate environment. Has anyone found a solution to this?