Changing Global Protect Portal Using plist without Restarting Mac

[ShawnP]

Here are the steps I've tried in chaning the portal Global Protect.app without restarting the Mac:

• Packaged up /Library/Preferences/com. paloaltonetworks.GlobalProtect.settings.plist and ~/Library/Preferences/com. paloaltonetworks.GlobalProtect.settings.plist with the new <portal>
• Deployed package to both paths listed above (Mac does not take setting after package is installed)
• Attempted to restart the client with a script (Works from terminal, but when script is run from JAMF)
• Rebooting Mac will make the portal setting take (Don't want to reboot end point, however)

Anyone successfully done this without restarting the Mac?

Thanks in advance,

Shawn

[ShawnP]

Also, here is a link to the <portal> change documentation given by Palo Alto:

https://www.paloaltonetworks.com/documentation/60/pan-os/newfeaturesguide/globalprotect-features/glo...

Case link:

https://paloaltonetworks--c.na5.visual.force.com/apex/case_page_ee?id=5007000001f65cm

[BenjAudy.MTL]

Hi,

So you mean it works from the terminal, but not from your management software? What is the command you're using to restart the client from the terminal?

By the way, I don't think we can access your cases.

Benjamin

[ShawnP]

I've tried several vesions of which user to remove / load the LaunchAgent shown below:

sudo launchctl remove com.paloaltonetworks.gp.pangps
sudo launchctl remove com.paloaltonetworks.gp.pangpa

sudo "launchctl load /Library/LaunchAgents/com.paloaltonetworks.gp.pangpa.plist"
sudo "launchctl load /Library/LaunchAgents/com.paloaltonetworks.gp.pangps.plist"

[BenjAudy.MTL]

I normally use the following command to restart the GlobalProtect service:

launchctl kickstart -k gui/`id -u`/com.paloaltonetworks.gp.pangps

Similarly, for the agent:

launchctl kickstart -k gui/`id -u`/com.paloaltonetworks.gp.pangpa

Benjamin