Different Global Protect Client Configurations For Different Users

[DonohoeRobert]

Hi Team, 

In the event a requirement becomes important for certain users to have different rules applied to their GlobalProtect clients this guide will show how to do this. 

Example; 

The director of the company wants to be able to disable the client but you need all other users to connect automatically and only disable the GP client with a passcode. 

Current agent configuration may be as below. 

This app has specific configurations. users can disable the app with a passcode for example. 

Clone this agent configuration

 
Click the User/User Group tab. Specify the users or groups you need different behaviours.

Click the App tab and edit the settings as required. For this configuration it is connect on demand for group’s b and c.

Now two agent configurations are present. The Gateways and Portals are the same for both. The only difference is group-a has a different agent configuration that group b and c. Users in Group b & c have to connect on demand where users in group a connect automatically and need a password to disconnect.

Best regards, 

Robert D