topic Re: GP connect before logon . in GlobalProtect Discussions

GP connect before logon .

mbharadwaj — Tue, 13 Oct 2020 02:22:48 GMT

Has anyone configured connect before logon .Would need steps to configure this .I have a few queries as well .Do we need pre-logon user agent config for this or no ? The registry values found in this document are not exact to what i see on windows .Any help is appreciated .

I have added this registery

PanGPS.exe -registerplap

Rest options are not the same as in doc .And after configuring i am not getting the okta page .

https://docs.paloaltonetworks.com/globalprotect/10-0/globalprotect-admin/globalprotect-apps/deploy-app-settings-transparently/deploy-app-settings-to-windows-endpoints/deploy-connect-before-logon-settings-in-the-windows-registry.html

Re: GP connect before logon .

OwenFuller — Tue, 20 Oct 2020 13:59:02 GMT

I participated in the 5.2 beta, and did some testing with a few users, but we didn't deploy it into production. I created simple batch file and registry file, so my test users could install it easily. You could see if the settings work for you, and probably configure something similar in SCCM or your software installation tool if you want.

Batch File

wmic product where name="GlobalProtect" call uninstall /nointeractive msiexec.exe /i GlobalProtect64-5.2.0.msi /quiet PORTAL="portal1.yourcompany.com" CANCONTINUEIFPORTALCERTINVALID="no" CANCHANGEPORAL="no" "C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPS.exe" -registerplap reg import PaloCBL.reg

Registry File (PaloCBL.reg)

Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect\CBL] "Portal1"="portal1.yourcompany.com" "Portal2"="portal2.somecompany.com" "AlwaysShowPortal"="yes"

Re: GP connect before logon .

fatboy1607 — Fri, 15 Jan 2021 12:51:13 GMT

OK do you see network sign screen post installation of 5.2 Agent and creating all required registry settings ?

Is this something Palo Alto Agent going to take care of ?