Hi @Jitaphon,
As far as I am aware this should not be possible. Unfortunately GlobalProtect agent for Windows does not provide any options to use the agent with CLI or script. At least not official one.
Having that said I would think of few other options that you could consider for unattended remote access to the endpoint:
- GlobalProtect agent with Always-on connection mode and certificate authentication. If you don't use certificate authentication for the rest of your GP users you can config the FW to authenticate user either by credentials or by certificate (which ever is presented by the connecting user)
- Consider third party IPsec VPN software. PAN FW can use X-Auth, which should basically means any third party IPsec VPN client could connect. In this case you need to find any that could be start with batch script as you want.
- Consider building IPsec site-to-site tunnel with the branch office and PAN FW.
