Different Global Protect Client Configurations For Different Users

Showing results for 
Show  only  | Search instead for 
Did you mean: 

Different Global Protect Client Configurations For Different Users

L3 Networker

Hi Team, 


In the event a requirement becomes important for certain users to have different rules applied to their GlobalProtect clients this guide will show how to do this. 



The director of the company wants to be able to disable the client but you need all other users to connect automatically and only disable the GP client with a passcode. 


Current agent configuration may be as below. 






This app has specific configurations. users can disable the app with a passcode for example. 





Clone this agent configuration







Click the User/User Group tab. Specify the users or groups you need different behaviours.









Click the App tab and edit the settings as required. For this configuration it is connect on demand for group’s b and c.





Now two agent configurations are present. The Gateways and Portals are the same for both. The only difference is group-a has a different agent configuration that group b and c. Users in Group b & c have to connect on demand where users in group a connect automatically and need a password to disconnect.


Best regards, 


Robert D 




  • 0 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!