topic Re: GP - Pre-Login in GlobalProtect Discussions

GP - Pre-Login

securehops — Fri, 28 Jun 2024 17:50:39 GMT

Hi All,

I have a GP Portal with a few different agent configurations. Depending on the user's AD group, they may have different settings. Current setup for all agent configs is Always-On. I want to enable pre-logon(always on) for a specific use case without impacting all the other users. What's the best way to go about this? If I were create a new agent configuration and that to pre-logon, I wouldn't be able to scope it to specific users, as pre-logon is not meant for users. What's the best way to accomplish this?

Eventually, maybe I would convert from always on to prelogon (always on) for all, but even then, would still need to maintain the couple different agent configuration settings.

thanks

Re: GP - Pre-Login

JayGolf — Wed, 03 Jul 2024 05:53:58 GMT

Hi @securehops ,

Are you planning to use pre-logon for users on an endpoint who have not previously logged in to the device? Or are you okay with having users login once for pre-logon? If the latter, you can create user group mapping for the specific users you'd like to test pre-logon. Once created add in the additional config and specify the user group you created.

Re: GP - Pre-Login

securehops — Thu, 04 Jul 2024 01:50:21 GMT

Hi @JayGolf

Kind of a mixed bag. That would be one use case. Another use case would be for users who have never logged into the machine before, so would need it for profile creation on the device. Basically, login to the device as a local account after imaging, connect to GP, add machine to AD domain. After that a new user would need to login and have their profile created.