topic Re: add a second portal address to GlobalProtect (v5.2.12-26) on Mac in General Topics

add a second portal address to GlobalProtect (v5.2.12-26) on Mac

cogbu — Mon, 05 Dec 2022 10:30:39 GMT

is there another way to add a second portal address to GlobalProtect (v5.2.12-26) on Mac, as I do not want to use a plist to add a second portal address to GlobalProtect.I want to be able to add the portal address via GlobalProtect?

Re: add a second portal address to GlobalProtect (v5.2.12-26) on Mac

TomYoung — Mon, 05 Dec 2022 16:49:49 GMT

Hi @cogbu ,

Yes, you can manage portals from the GP client. Click on the GP icon in the upper right menu bar, and then the "hamburger" menu. My client is 6.0.3-38, and after the menu I click Settings and then Connections. I have done it on the GP client for years; so, I am 99% you can do it with 5.2.12-26.

Thanks,

Tom

Re: add a second portal address to GlobalProtect (v5.2.12-26) on Mac

BPry — Mon, 05 Dec 2022 16:57:39 GMT

Just an asterisks to what @TomYoung stated, this can be limited by the admin so a user can't just add portals to the agent. In the event that you have restrictions in place preventing you from modifying the portal address, plist would be the only way to override this.

If this is a personal computer I'd try making the argument that your administrator needs to change this setting and allow users to modify the portal address. There's no reason to be restricting this setting on a personal device, but if this is an issued device that could complicate things. IF there's a business need to connect to multiple portals I'd push for a separate agent config that would allow you to modify the portal address.

Re: add a second portal address to GlobalProtect (v5.2.12-26) on Mac

cogbu — Mon, 05 Dec 2022 17:31:17 GMT

They can type the portal address in, but when they click on Save, it does not save!

This works OK on Windows laptops. Both Mac & Windows laptops connect to the same Prisma Access gateway and use the same App Settings profile. But this does not work for Mac laptops.and user does not want to use Plist.

Re: add a second portal address to GlobalProtect (v5.2.12-26) on Mac

cogbu — Mon, 05 Dec 2022 17:33:08 GMT

A separate agent could also be considered.

Re: add a second portal address to GlobalProtect (v5.2.12-26) on Mac

TomYoung — Mon, 05 Dec 2022 17:40:33 GMT

Hi @cogbu ,

Did you see @BPry 's comment? Please make sure clients are allowed to make changes. If you are using Prisma Acess, you would need to make the changes there.

My GlobalProtect client does not have a Save button. Maybe because it is version 6.

Thanks,

Tom

Re: add a second portal address to GlobalProtect (v5.2.12-26) on Mac

cogbu — Thu, 15 Dec 2022 10:44:31 GMT

Thank you for your suggestions.

in this case, It was related to plist permissions on Mac laptops. When the user tried to save the additional portal address, he didn't have the permissions for this to be saved to the relevant plist.

thank you!