Default-browser setting overwritten

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Default-browser setting overwritten

L0 Member

Our company uses GlobalProtect and I have this working on Linux.  They recently made a change to the settings so that the <default-browser>yes</default-browser> has been removed from pangps.xml.  This has caused some upset as the built-in browser appears to have some issues with our 2-factor authentication.  I assumed that I could then just add the default-browser option back in to my local pangps.xml but this gets overwritten every time I log in and so it ends up trying to use the built-in browser anyway.  Is there a way to stop this happening?

3 REPLIES 3

Cyber Elite
Cyber Elite

this is a configuration setting on the portal. any changes you make manually will be overwritten each time the agent connects to the portal to fetch the config

reaper_0-1720515557705.png

 

if this needs to be disabled for all the other agents (and you only need it for linux)

you can actually create an agent config specifically for linux that has this option enabled:

 

reaper_1-1720515649840.png

 

 

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

L0 Member

Thanks; is there no way to have a local configuration option in that case?  Is it everyone or no-one?  It seems odd as I believe this works for some people but not all, but not having the option to do something different per client seems a bit restrictive.

The way GlobalPortect is designed makes that configuration is always fetched from the portal. local options are limited to just a few things like hardcoding the portal address

 

you may have missed it, but the second screenshot in my previous posts show that you can make a different config for different users/groups or per operating system, so if you like you can have different configuration versions floating around for different groups of users or for different operating systems

 

reaper_0-1720600947036.png

 

you can even host different configuration versions based on device serial number, machine certificate or registry entries 

 

reaper_1-1720601055494.png

 

 

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization
  • 320 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!