topic Re: Changing Global Protect Portal Using plist without Restarting Mac in General Topics

Changing Global Protect Portal Using plist without Restarting Mac

ShawnP — Tue, 20 Dec 2016 20:00:09 GMT

Here are the steps I've tried in chaning the portal Global Protect.app without restarting the Mac:

Packaged up /Library/Preferences/com. paloaltonetworks.GlobalProtect.settings.plist and ~/Library/Preferences/com. paloaltonetworks.GlobalProtect.settings.plist with the new <portal>
Deployed package to both paths listed above (Mac does not take setting after package is installed)
Attempted to restart the client with a script (Works from terminal, but when script is run from JAMF)
Rebooting Mac will make the portal setting take (Don't want to reboot end point, however)

Anyone successfully done this without restarting the Mac?

Thanks in advance,

Shawn

Re: Changing Global Protect Portal Using plist without Restarting Mac

ShawnP — Tue, 20 Dec 2016 20:09:30 GMT

Also, here is a link to the <portal> change documentation given by Palo Alto:

https://www.paloaltonetworks.com/documentation/60/pan-os/newfeaturesguide/globalprotect-features/globalprotect-agent-deployment-customization

Case link:

https://paloaltonetworks--c.na5.visual.force.com/apex/case_page_ee?id=5007000001f65cm

Re: Changing Global Protect Portal Using plist without Restarting Mac

BenjAudy.MTL — Tue, 20 Dec 2016 20:17:31 GMT

Hi,

So you mean it works from the terminal, but not from your management software? What is the command you're using to restart the client from the terminal?

By the way, I don't think we can access your cases.

Benjamin

Re: Changing Global Protect Portal Using plist without Restarting Mac

ShawnP — Fri, 23 Dec 2016 20:47:03 GMT

I've tried several vesions of which user to remove / load the LaunchAgent shown below:

sudo launchctl remove com.paloaltonetworks.gp.pangps
sudo launchctl remove com.paloaltonetworks.gp.pangpa

sudo "launchctl load /Library/LaunchAgents/com.paloaltonetworks.gp.pangpa.plist"
sudo "launchctl load /Library/LaunchAgents/com.paloaltonetworks.gp.pangps.plist"

Re: Changing Global Protect Portal Using plist without Restarting Mac

BenjAudy.MTL — Fri, 23 Dec 2016 21:01:21 GMT

I normally use the following command to restart the GlobalProtect service:

launchctl kickstart -k gui/`id -u`/com.paloaltonetworks.gp.pangps

Similarly, for the agent:

launchctl kickstart -k gui/`id -u`/com.paloaltonetworks.gp.pangpa

Benjamin