Has anyone managed to get global protect pre-logon to work???

[MalcolmMaynes]

Has anyone managed to get global protect pre-logon to work? specifically, with a remote users laptop.

When the laptop is booted up, at the logon prompt before entering username and password details, do you get a pre-logon connection?

[Gregoux]

hi

for the prelogon you need to configure the user login and the user password from the setting of global protect agent.

and reboot the client pc, the global protect agent started as a service and try to connect with the credential that provide in the setting of the agent, in fact you are connected without opening a windows session. you can benefit of the update for your pc via vpn like that.

[VinceM]

Hi,

Just keep in mind that for pre-logon connexion, just password can be light. Maybe could be better for you to make authent with password and cert.

V.

[MalcolmMaynes]

Hi all,

I have the pre-logon user set. On the client i have entered the pre-logon username and password and ticked the 'remember' me box.

I get no errors, the connection shows up on the remote users window on the Palo. I reboot the laptop but i dont get a connection before the logon prompt.

[gswcowboy]

are you using machine certificate to assist with connecting as a pre-logon user?     

[MalcolmMaynes]

Yes, machine certificate is setup and working fine...

[ACieszkowski]

Can you paste your GlobalProtect configuration in XML format?

[MalcolmMaynes]

How do i save the client config as XML ?

[ACieszkowski]

Refer to: https://live.paloaltonetworks.com/docs/DOC-3552

If it is possible paste lines between <globalprotect>...</globalprotect>

[gswcowboy]

you'll need to provide snippet of the pangp service debug logs for further assistance here. specifically where the log indicates an error to connect. might provide code to shed more light on the matter     

[jmenon]

Refer to configuration tech note

Another useful document

[MalcolmMaynes · Accepted solution]

Hi All,

I managed to get it working with help from Exclusive Networks Support. The problem was with the root CA.