topic Re: Running script user cinnecting to GP in General Topics

Running script user cinnecting to GP

BigPalo — Wed, 16 Dec 2020 11:36:29 GMT

Hi,

We would like to run a script for the users when GP VPN goes UP. This script is for mapping network drives in theclients.

Is possible to do that? any link with info?

Re: Running script user cinnecting to GP

S.Cantwell — Wed, 16 Dec 2020 13:39:36 GMT

Good Morning.

Thank you for your question.

While not specifically something related to GP or PANW, there are plenty of websites that discuss how to script network mapped drives:

https://tinyurl.com/yalr3xqy

I believe your script would need to be run AFTER the GP is connected. It should be possible to create an IF/THEN loop in your script. IF connected to GP, THEN do this, else, go back to IF statement. There are WHILE statements as well... WHILE the VPN is up, DO this mapping script, etc.

Good Luck.

Re: Running script user cinnecting to GP

BigPalo — Wed, 16 Dec 2020 15:01:30 GMT

But what is the trigger to run this script? is there any config in GP to do this in clients?

Re: Running script user cinnecting to GP

S.Cantwell — Wed, 16 Dec 2020 15:04:05 GMT

There is no "scripting" that I am aware of, to start any processes.

You would need to build this from scratch.

Thank you.

Re: Running script user cinnecting to GP

BigPalo — Wed, 16 Dec 2020 15:06:33 GMT

Yes, i know, but there is any confgi in Palo to load this customized script in order to activate it whne GP tunnel is UP?

Re: Running script user cinnecting to GP

Mick_Ball — Wed, 16 Dec 2020 16:39:30 GMT

you can run a pre or post VPN script. just edit the registry and tell it what file to run on connection (post vpn)

HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect\Settings\post-vpn-connect

so we have it here..

and it runs this script, this script also incudes a reg setting that is added on connection..

additional help can be found here...

https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/globalprotect-apps/deploy-app-settings-transparently/deploy-app-settings-to-windows-endpoints/deploy-scripts-using-the-windows-registry.html