How to configure GlobalProtect Portal to deliver different connection methods to different users or user groups.
Environment
GlobalProtect Portal
Resolution
Go to Network > GlobalProtect > Portals and select the desired portal.
Go to Agent and add a new agent config. Under Config Selection Criteria add the User or the User Group that need the on-demand access. Go to the App tab, Connect Method and select 'On-demand (Manual user initiated connection)'.
Go to Agent and add a second agent config. Under Config Selection Criteria add the User or the User Group that need the pre-logon access. Go to the App tab, Connect Method and select 'Pre-logon (Always On)'.