topic Default-browser setting overwritten in GlobalProtect Discussions

Default-browser setting overwritten

amanchesteruser — Tue, 09 Jul 2024 08:04:36 GMT

Our company uses GlobalProtect and I have this working on Linux. They recently made a change to the settings so that the <default-browser>yes</default-browser> has been removed from pangps.xml. This has caused some upset as the built-in browser appears to have some issues with our 2-factor authentication. I assumed that I could then just add the default-browser option back in to my local pangps.xml but this gets overwritten every time I log in and so it ends up trying to use the built-in browser anyway. Is there a way to stop this happening?

Re: Default-browser setting overwritten

reaper — Tue, 09 Jul 2024 09:01:58 GMT

this is a configuration setting on the portal. any changes you make manually will be overwritten each time the agent connects to the portal to fetch the config

if this needs to be disabled for all the other agents (and you only need it for linux)

you can actually create an agent config specifically for linux that has this option enabled:

Re: Default-browser setting overwritten

amanchesteruser — Tue, 09 Jul 2024 09:14:48 GMT

Thanks; is there no way to have a local configuration option in that case? Is it everyone or no-one? It seems odd as I believe this works for some people but not all, but not having the option to do something different per client seems a bit restrictive.

Re: Default-browser setting overwritten

reaper — Wed, 10 Jul 2024 08:44:47 GMT

The way GlobalPortect is designed makes that configuration is always fetched from the portal. local options are limited to just a few things like hardcoding the portal address

you may have missed it, but the second screenshot in my previous posts show that you can make a different config for different users/groups or per operating system, so if you like you can have different configuration versions floating around for different groups of users or for different operating systems

you can even host different configuration versions based on device serial number, machine certificate or registry entries