Global protect in kiosk mode

[britth01]

Hello, 

We have a project to deploy Windows laptops in Kiosk mode for a specific group of users. Does anyone here have a use case? How is everyone else using GP in Kiosk mode?

Currently, We have 1 gateway for all of our users and use a machine cert with username/password for authentication. 

I would like to be able to use the same gateway and machine cert for the Kiosk devices as well and just add an agent config specific to the Kiosk devices. 

Any thoughts, suggestions, tips are greatly appreciated.

GlobalProtect

[reaper]

i have a setup where the kiosk simply identifies itself using a certificate. they are quarantined on their own gateway with their own set of rules so we can easily control what the kiosks are able to access

i also have a small fleet of 'multiuser' terminals, those simply rely on the user's credentials and are in enforcement mode so theyre completely isolated until the user logs on, the user's environment relies on a smart card for the user to be logged on, so as soon as they leave the room the desktop logs off and gp disconnects 

[britth01]

Thank you for the reply. We're using the same gateway for all.