topic Re: Is it a way to preconfigure the global protect agent? in General Topics

Is it a way to preconfigure the global protect agent?

Gregoux — Thu, 11 Jul 2013 09:29:08 GMT

I want to predifine the portal url and login user information with the setup of the global protect agent?

anyone did'it, if yes how?

Re: Is it a way to preconfigure the global protect agent?

_slv_ — Thu, 11 Jul 2013 09:36:37 GMT

that's good question ...

I checked with Orca the .msi file but there isn't portal/gateway/user field in .msi - probalby you must request this as feature request.

Maybe it's possible to provide url and user as a parameter of .msi file - I don't know.

Regards

Slawek

Re: Is it a way to preconfigure the global protect agent?

dwalter — Thu, 11 Jul 2013 13:06:55 GMT

I deployed mine using my KACE 1000 appliance and then also pushed out the registry keys from a device that had it installed and configured. The user still needed to log into the GlobalProtect client once to setup the connection using SSO but that was all that needed to be done from there.

Re: Is it a way to preconfigure the global protect agent?

jvalentine — Thu, 11 Jul 2013 15:05:00 GMT

See:

"Assuming all notebook computers are in AD domain, you can deploy a registry key "Portal" under HKEY_LOCAL_MACHINE\Software\Palo Alto Networks\GlobalProtect\PanSetup with your portal hostname in it."

Re: Is it a way to preconfigure the global protect agent?

Dave_Block — Tue, 04 Mar 2025 14:59:23 GMT

msiexec.exe /i GlobalProtect.msi
/quiet PORTAL=”portal.acme.com”

From https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-apps/deploy-app-settings-transparently/deploy-app-settings-to-windows-endpoints/deploy-app-settings-from-msiexec#id6e2237b5-8d87-4506-8d1a-2f6688767010