topic Command to Disconnect Global Protect VPN in GlobalProtect Discussions

Command to Disconnect Global Protect VPN

Jon_Palo92 — Tue, 28 Oct 2025 15:04:58 GMT

I'm looking for a PowerShell script or commands to disconnect the Global Protect VPN and preventing the auto connection happen again and enforce the user to enter the credentials again.

In addition, I need same thing for MacBook devices. Thank you!.

Re: Command to Disconnect Global Protect VPN

kiwi — Tue, 28 Oct 2025 16:29:57 GMT

Hi @Jon_Palo92 ,

GlobalProtect is designed to be fully configurable by your organization's IT department to prevent users from disconnecting.

The goal of this configuration is often to enforce a "mandatory always-on" security posture, ensuring your device remains protected and compliant with company policy at all times. If the administrator sets the connection method to "Always On" and disables the option to disconnect in the Portal configuration, the VPN client will reconnect after any disruption or forced shutdown.

Since the ability to disconnect is controlled by your organization's security policy and firewall administrator you should reach out directly to your company's IT Help Desk or Security Department. They are the only ones who can verify your current security policy and make the necessary changes to the GlobalProtect Portal configuration to allow you to disconnect or to change your connection settings.

It kinda depends on your connect method and whether or not disconnecting is allowed in your GP portal configuration:

Kind regards,

-Kim.

Re: Command to Disconnect Global Protect VPN

Jon_Palo92 — Tue, 28 Oct 2025 17:52:22 GMT

Hello @kiwi

I’m working on a project where I need to apply a script to disconnect non-managed devices. So far, I’ve managed to send a command to disconnect the GlobalProtect VPN session on a Windows machine. However, as you’re aware, it automatically reconnects without requiring the user to enter their credentials again. I understand this behavior is due to the current settings in the Palo Alto firewall.

My question is: Is there a way on the Windows device to clear the cache, session, or any other stored data that would force the user to re-enter their credentials when the VPN reconnects or auto-connects?