topic Re: GlobalProtect Multiple Portal Support in General Topics

GlobalProtect Multiple Portal Support

Tanquen — Wed, 06 Mar 2019 23:18:31 GMT

I have GlobalProtect 4.1.3-8 and durning the install I added to portails and there is now a portal selection at the bottom but ater make a connection it is always grey and I see no wat to log out of the current connection.

This is on a Windows 7 install so I'm guessing it works in Windows 10 or I'm missing a disconect option someplace. ???

Re: GlobalProtect Multiple Portal Support

Mick_Ball — Thu, 07 Mar 2019 07:03:42 GMT

You may be guessing wrong, i would check the portal app settings on the firewall to see if you are allowed to do what you hope to do.

you may be set to always on and denied change portal address, this will overide any previous settings on connection.

Re: GlobalProtect Multiple Portal Support

Tanquen — Thu, 07 Mar 2019 14:43:12 GMT

So I’m a user of the client software and need to connect more than one customer and customer A can block me from connecting to customer B or anyone else? I have to uninstall and reinstall to connect another portal? Seems kinda odd. 😞 Not sure why they would do this as customer A itself has more than one portal for their organization. ???

" i would check the portal app settings on the firewall " The Windows firewall? I only have the client.

Re: GlobalProtect Multiple Portal Support

Mick_Ball — Thu, 07 Mar 2019 14:57:43 GMT

" i would check the portal app settings on the firewall " The Windows firewall? I only have the client.

no sorry, the palo alto firewall you are connecting to...

the GP settings are under Device\Network\Portal\Agent\Configs\App

we have 6 portals and all are set to deny users changing portal address.(prevent users tamporing)

however, our 7th one is for 3rd party support and this allows them to change portals.

so perhaps the PA administrator is not aware of the issue he is causing and could create a seperate config on the same portal to allow you to change addresses.

if you need further advice on this then no problem but you of course will not be able to modify the PA settings.

Also... it is not uncommon to use a seperate VM for different VPN's.

Re: GlobalProtect Multiple Portal Support

Mick_Ball — Thu, 07 Mar 2019 14:59:12 GMT

also2. if you need to connect to other URL's then simply have a reg key on your desktop to change portal in the registry but you will need to restart the PANGps service to swap...

Re: GlobalProtect Multiple Portal Support

Tanquen — Thu, 07 Mar 2019 15:56:29 GMT

Not sure how this stops tampering. I can see an over the top IT department wanting it but not really stopping anything. Oh well.

That sounds loads better than keeping a number of VMs going or reinstalling. I do use a VM for my various VPN connections and was hoping to not have to make more.

Just search the registry for the portal address?

Thanks for the info.

Re: GlobalProtect Multiple Portal Support

Tanquen — Thu, 07 Mar 2019 16:07:25 GMT

P.S. I terribly miss Mr. David Robert Jones. 😞

Aside from enjoying his music, in every interview I saw of him, he seemed like a nice guy.

Re: GlobalProtect Multiple Portal Support

Mick_Ball — Thu, 07 Mar 2019 16:11:32 GMT

HKEY_CURRENT_USER\Software\Palo Alto Networks\GlobalProtect\Settings

the key is LastUrl

Re: GlobalProtect Multiple Portal Support

Mick_Ball — Thu, 07 Mar 2019 16:17:03 GMT

yeah, big part of my life back in the 70's, my brother was a zillion times more of a fan and i lost him last year so me little piccy is a tribute to him aswell...

the tampering thing...

we have over 8000 GP users and as soon as they cannot connect (usually wifi issues) they will modify the portal address cos they know best.... this would generate thousands of calls so we tie it down.

we also set to "always on" as we do not allow access to any other network apart from ours.

this is company policy so i have no say...

Laters...

Re: GlobalProtect Multiple Portal Support

Tanquen — Thu, 07 Mar 2019 16:17:17 GMT

I had found the portal folders but not that key. Thanks!

Re: GlobalProtect Multiple Portal Support

Mick_Ball — Thu, 07 Mar 2019 16:31:36 GMT

yes its not in the portal folders, its in settings.

Re: GlobalProtect Multiple Portal Support

Tanquen — Thu, 07 Mar 2019 16:43:18 GMT

Understood, I just meant before your last reply I’d found the folders but did not know what key I was looking for. Just exporting the Settings folder worked as the last portal used was one that allowed disconnects. Too bad they can’t just lock the portal address once added and still let people disconnect.

Thanks again.