Feature Request : GlobalProtect Disable uninstall of agent from workstation

cancel
Showing results for 
Search instead for 
Did you mean: 

Feature Request : GlobalProtect Disable uninstall of agent from workstation

L1 Bithead

We need the ablity to disable the uninstall of the GlobalProtect agent from our corp laptops. As it is now our users can and will uninstall it.

Traps has this ablity but I cannot seem to find anywhere to secure GlobalProtect

9 REPLIES 9

Cyber Elite
Cyber Elite

@tmcneil ,

To the best of my knowledge this is not a feature within GlobalProtect. Traps does this through an uninstall password, which isn't an option with GlobalProtect. I would recommend you contact your SE to either add your vote to an existing feature request for this feature or have him create a feature request for this. 

L7 Applicator

Can this not be done via "Group Policy".

 

 

@MickBall,

The fact that they have permissions to uninstall applications would lend them to being local admins. You can certaintly make it harder via file permissions and registry access settings, but they can override any of that. 

@tmcneil, you could disable the actual Windows Installer once everything is actually configured to prevent any installation or uninstallation of software across the board, however I'm guessing the users are local admins for a reason and they actually need to be able to install/remove other applications. Obviously the best course of action would be to remove their admin rights so they couldn't do this. 

I wish we could remove their admin right but…

Anyway Traps has the ability to be secured with an uninstall password. I was hoping for something like that

OK noted, we use a proxy.pac file to prevent web access without GProtect but if they are admin then this can also be removed.

 

 

 

 

@tmcneil,

So I suck at actually reading and didn't notice you had Feature Request right in the subject of the message. Feature Request need to go through your SE as nobody here can actually enter them for you. Once you've done that and they've either established an existing FE number or give you the new FE number they generated be sure to post it here so people can add their vote to it, as the feature would be rather helpful in situations like yours. 

@tmcneil 

When you have received the feature request ID by your SE, please post it in this topic: https://live.paloaltonetworks.com/t5/General-Topics/Feature-Request-List/m-p/209128#M61154

How do I find status of feature requests made via the SE? 

--Alan

Here is the number my FE got entered for me.

FR ID: 5357 - GlobalProtect Agent uninstall password

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!