GlobalPotect initial login

[rchung54]

I have deployed the GlobalProtect Always-On VPN via the MSI.exe, where the external gateway is specified. The GP client installs fine on the Windows endpoints.

The remote user logs into the Win 10 endpoint with their Windows domain credentials as normal. As they have never connected via the GP client before, they are prompted to enter their Windows domain credentials onto the GP client, the user is then authenticated and the GP client connects fine. Each time the remote user connects again, they just enter their Windows domain credentials at the Windows logon screen and they are connected, without having to enter their Windows domain credentials onto the GP client again. That's great. Just as I expected it to work.

Is there a way to bypass entering their Windows domain credentials onto the GP client the first time a user logs in? Just think it'll be one less step for the user to do, upon that initial connecting via the GP client.

Any thoughts and advice is much appreciated.

Robert

[S.Cantwell]

I think it relies on cached credentials to have the VPN succeed.

Now... *could* PANW take your credentials from your login, and put them into GP... maybe (but that is a feature request...)  😛

So for now, it is working as engineered, and so no, I am not aware of aware of auto copy/paste the creds into the GP portal. 

[rchung54]

Thanks Steve,

It would be a nice feature to have.

[MP18]

there is option on the Portal under Agent 

Save your credentials -   Try to change that to Yes and see if this helps.