topic Global Protect connection windows in General Topics

Global Protect connection windows

gustavosj — Fri, 25 Aug 2017 21:40:22 GMT

Guys,

It's there a way to hide the windows of global protect if the user can't connect to the portal?.

I need to do this super transparent to the user, now i'm installing the client with this settings:

GlobalProtect.msi /quiet ENABLEADVANCEDVIEW="NO" SHOWAGENTICON="NO" CONNECT-METHOD="pre-logon" CANCHANGEPORTAL="NO" CANPROMPTUSERCREDENTIAL="NO" PORTAL="--portalurl--"

But if the user can't reach the portal a windows saying :""Could not connect to the portal" appears with a button that says "Connect", i need to hide this type of dialogs to the user.

Thanks for your help!!

Re: Global Protect connection windows

Remo — Sat, 26 Aug 2017 20:13:19 GMT

Hi @gustavosj

This topic was already discussed a lot here. In some cases there are solutions and (unfortunately) in other cases there is almost no way to do everything completely transparent to the user. So lets try it this time with your situation 😉 But before we recommend you something that does not apply to your environment, I kindly ask you to answer these questions:

Does this dialog only appears in case of connection problems or also right after the installation is complete?
What PAN-OS version do you have installed on your portal and gateway?
As you specified pre-logon, you already use certificates, right? User or client certificates?
What additional authentication are you using (ldap, radius, ...)?
You're trying to hide everything completely from the users eyes, so I assume you aren't using any multi-factor-authentication? (TOTP, SMS, ...)
What GP agent version do you use?
Does your company already have a SAML IdP infrastructure (e.g. Microsoft ADFS)?

Re: Global Protect connection windows

gustavosj — Fri, 08 Sep 2017 20:47:27 GMT

Dear sorry for the delay in the answer.

Does this dialog only appears in case of connection problems or also right after the installation is complete?

Only appears in connection problems.

What PAN-OS version do you have installed on your portal and gateway?
8.0.4 (the last one i think)

As you specified pre-logon, you already use certificates, right? User or client certificates?

User Certificate.

What additional authentication are you using (ldap, radius, ...)?

LDAP

You're trying to hide everything completely from the users eyes, so I assume you aren't using any multi-factor-authentication? (TOTP, SMS, ...) Exactly.

What GP agent version do you use?

4.0.3

Does your company already have a SAML IdP infrastructure (e.g. Microsoft ADFS)?

Nop

Thanks!!

Re: Global Protect connection windows

Remo — Sun, 10 Sep 2017 09:48:03 GMT

Hi @gustavosj

So you upgraded to 4.0.3 this week as this version wasn't released when you started this topic, but anyway have you set the same MSIEXEC setting in your portal configuration?

Btw: Does pre logon work with user certificates as they shouldn't be available for the connection prior to login?

Re: Global Protect connection windows

gustavosj — Tue, 12 Sep 2017 17:50:03 GMT

Yes user logon works perfectly in pre-logon and later in user logon.

The problem is that when i lost connection or if something blocks the connection to the portal, a screen in the app is showed saying that it is not possible to connect.