Checking if Global Protect is active (connected) via script or command line

[Andreikin]

Hello Team,

I would like to find out if there's an option to check if Global Protect agent is connected and VPN is active using Windows CMD or PowerShell script?

Thanks. 

[BPry]

@Andreikin,

From the client endpoint or through the firewall? Both would be relatively simple:

Client Endpoint

There's multiple ways to do this, anything from parsing ipconfig information to seeing if you can access an internal resource and using the response to return status. The surefire way would be to parse Get-NetAdapter response and find the status of PANGP Virtual Ethernet Adapter. Something like this and then parse the returned status to check if it's Up, or Disabled:

Get-NetAdapter | Where-Object {$_.InterfaceDescription -like "PANGP Virtual Ethernet Adapter*"} | Select-Object Status

Via Firewall

I'd personally right a script to just check if the requested user/machine is showing active on GlobalProtect using the API. 

[zarif98]

Would it also be possible to check if I'm connected to the correct portal as well and not just GlobalProtect?