topic Re: GlobalProtect connect via batch in General Topics

GlobalProtect connect via batch

Alexis_Koch — Thu, 01 Oct 2015 09:54:30 GMT

Hello, Our GlobalProtect Agent will be installed on different kind of PCs. Some external (the PCs of some suppliers or computer maintenance), and some internal (laptops with 3G connections). So I've chose the "on-demand" connection. For the internal laptops (Windows), I'd like to do a batch to launch the 3G connection, then when it's ok to launch and connect the VPN (users, passwords and gateway will already be saved). The 3G part is working, but I cant' find a way to launch the PanGPA.exe with options (something like PanGPA.exe -connect), which I'd use in a batch... Maybe there's an other way to do that, but this works nice with our old Checkpoint firewall and Secure remote... Thank you for your help!

Re: GlobalProtect connect via batch

glastra1 — Thu, 01 Oct 2015 17:25:28 GMT

The easiest way is to configure 2 separate agent configuration. In the first one the external user group with "on-demand" connection and in the second one with internal users using "always on" connection.

I think that the file doesn't accept parameters, the only thing is probably edit some settings,

https://www.paloaltonetworks.com/documentation/61/globalprotect/globalprotect-admin-guide/set-up-the-globalprotect-infrastructure/deploy-agent-settings-to-windows-clients.html#94673

https://www.paloaltonetworks.com/documentation/61/globalprotect/globalprotect-admin-guide/set-up-the-globalprotect-infrastructure/customizable-agent-settings.html

regards,

Gerardo.

Re: GlobalProtect connect via batch

Alexis_Koch — Fri, 09 Oct 2015 15:19:15 GMT

Thank you for the answer, that's what I did. It works, it's just a little more complicated to manage.