GlobalProtect App Settings and Multiple environments.

[SethEfrat]

Hi all,

We've configured a few app settings for GlobalProtect and my assumption is, that when you make a connection to VPN, your client will pull down these app settings.  

However, if you connect to another VPN (another environment) with different app settings, how do they reconcile? What settings take precedence ?

Thanks

[aleksandar.astardzhiev · Accepted solution]

Hi @SethEfrat ,

In general establishing VPN connection with GlobalProtect perform two separate actions:

- First GlobalProtect agent will connect GP portal to get agent settings. Part of these settings are which GP gateways agent needs to connect and the rest is behaviour of the agent itself, the app settings you are refering

- Second GP agent will connect to the GP gateways received from the portal and establish connection.

If GP agent connects to another portal it will get settings from that portal and completely override evertything else and start using what ever is being provided by the GP portal to which GP agent is now connected, including gateway list and app settings.

This could be tricky, because if you connect to another portal that forbits user from switching GP portals  ("Allow User to Change Portal Address" set to no), there is no easy way for end user to connect back to previous portal - because the latest connected portal no longer allow you switch.