topic Re: Global Protect client silent configuration in General Topics

Global Protect client silent configuration

LCMember317 — Tue, 13 Sep 2011 13:27:40 GMT

Hello everybody,

I have to distribute global plotect client to 200 notebook. I have successfully tried using GPO. The question is:

How can I prevent manual insert username, password and portal address on 200 notebooks the first time?

Thanks for the advice.

Daniele

Re: Global Protect client silent configuration

jleung — Tue, 13 Sep 2011 15:25:27 GMT

Hi,

Assuming all notebook computers are in AD domain, you can deploy a registry key "Portal" under HKEY_LOCAL_MACHINE\Software\Palo Alto Networks\GlobalProtect\PanSetup with your portal hostname in it.

When you choose single sign-on as instead of on-demand as the mode of GP client, we will use Windows credential to transparent auth the client with the portal.

So now everything will be transparent.

Re: Global Protect client silent configuration

LCMember317 — Thu, 15 Sep 2011 12:33:19 GMT

Hi and thanks for the advice.

Another thing ...

When I try to switch between two connection (the first with internal network cable and the second with a UMTS connect card for testing internl and external gateways) many times the program ask me to enter the Gateway password. Why?

I have installed Kaspersky Antivirus on computers and I just create the exclusions (otherwise nothing work!). Any idea?

Thanks

Daniele.

Re: Global Protect client silent configuration

jleung — Sat, 17 Sep 2011 16:08:06 GMT

Hi,

It is because you are creating the SSL VPN tunnel from two different IP addresses during the switch. Will you see the same problem if you choose to save the password?

Antivirus may think our process is malware and so sometimes you need to exclude it from scanning.

Re: Global Protect client silent configuration

LCMember317 — Mon, 19 Sep 2011 09:14:03 GMT

In Windows 7 64bit is not possible to set the gateway address from registry. Anyone know the solution?

Re: Global Protect client silent configuration

jpa — Thu, 22 Sep 2011 01:28:12 GMT

If i understand you dont see the HKEY_LOCAL_MACHINE\Software\Palo Alto Networks\GlobalProtect\PanSetup in Win64 bit? Did you install GP agent on the host and see if you see the registry key?

Re: Global Protect client silent configuration

LCMember317 — Thu, 22 Sep 2011 09:01:19 GMT

I've installed the GP, create the registry key and reboot the system. When open PA I can't see the portal address. this appened only in 64bit system. In 32bit system all works good!

Re: Global Protect client silent configuration

rkasbohm — Sun, 16 Oct 2011 15:18:47 GMT

Does anyone have an update on this? I also have the issue with 64bit clients

Re: Global Protect client silent configuration

LCMember317 — Tue, 18 Oct 2011 09:29:35 GMT

Not for me. Only on 32bit system the registry key function.

Re: Global Protect client silent configuration

ggarrison — Thu, 27 Oct 2011 15:36:13 GMT

Have you tried searching the entire registry for the keys in question?

Re: Global Protect client silent configuration

jmenon — Tue, 30 Oct 2012 21:13:29 GMT

64 bit also should work. Bug 33019 was fixed.