08-08-2022 04:44 AM
Hi there,
we have global protect with different agent configs based on ad groups enrolled.
We have different configs for always on and always on disable on demand
since the upgrade to global protect 6.0.3 some users seems to get a different config (always on instead of disable on demand)
in PANOS 9.0 you could see in the system logs of the firewall which config was chosen.
in panos 10.1 i don't see this info under the global protect logs.
is there any possibility (e.g. cli) to see the config, the user gets on login?
Thanks
08-09-2022 06:59 PM
You should see this under the GlobalProtect logs under ( eventid eq gateway-getconfig ). You'll need to make sure that you have the description column toggled so that you actually see that information, but it should all be there for every single client.
08-09-2022 06:59 PM
You should see this under the GlobalProtect logs under ( eventid eq gateway-getconfig ). You'll need to make sure that you have the description column toggled so that you actually see that information, but it should all be there for every single client.
08-09-2022 10:35 PM
@BPry Thanks.
thats exactly what i searched for.
i tried to figure out wich coloumn it is, but description was too easy
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
