topic auto (pre)logon unconfigured installations in GlobalProtect Discussions

auto (pre)logon unconfigured installations

bfuchs_lbrstbr — Wed, 24 Jan 2024 13:17:06 GMT

Hi everybody,

I use pre-logon (always on) for our users which works pretty well. One of the goals is to prohibit Internet access without VPN.

Now consider the following situation: People receive a freshly installed notebook (Windows). The GlobalProtect client is installed but it was never configured. In fact, no user logged into Windows so far as the process is automated a lot (thankfully).

How do I get the GP client to connect to the firewall without any user login in order to apply the "Enforce GlobalProtect Connection for Network Access" policy?

Re: auto (pre)logon unconfigured installations

Mick_Ball — Fri, 26 Jan 2024 13:27:51 GMT

we are currently testing imaged devices that connect via pre-logon when posted to users home address... but prior to all this and to date, we use a proxy.pac file that is auto read by browser. it tries to do a reverse lookup internally and if succeeds then proxy is set to "direct" (no proxy), if the internal host is not detected then it adds a false proxy of 1.2.3.4 , which prevents any browsing.

also in the pac file is an exception to allow connections to our portals and gateways, this works well and also good for iPads.