Pre-Populate Multipule Portal Addresses

[M.Maus]

I would like to know if there is a way to setup the .msi file to pre-populate the portal ip addresses for my users.

I found this kb article on how to set it up (How to predefine Global Protect portal address using Microsoft ... - Knowledge Base - Palo Alto Netw...), but I have multipule portals I need to add.  This only has instructions for a single portal.

I tried adding another "Portal" line to the instructions and also a "Portal2", but these did not work.  I also tried putting two IP addresses in the Portal filed separated by a , and also a ;, but this did not work either.

[OtakarKlier]

Hello,

Hello

Not sure about the msi, however you can add the registry entries.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HAMSCA4

Also check out this article that explains how a Large Scale VPN is setup. 

https://docs.paloaltonetworks.com/ngfw/administration/large-scale-vpn-lsvpn

Regards,

[M.Maus · Accepted solution]

I found my answers.  It is not possible to install multiple portals with the MSI file.  The MSI file will allow one per the instructions, but when you add a second it overwrites the previous one this is a limitation per Palo Alto's programming.  All other portals are added into the registry per the local users GUID ID...so without knowing the users GUID to match to the registry entry...this cannot be included into the msi install file and requires a GPO sign in script or Powershell script to run after the user has logged into their machine to match to the proper registry entry.

Ideally Palo would change the install to allow a Portal1, Portal2, Portal3... to be in the msi parameters or allow portals to be installed into the ...\GlobalProtect\Settings along with the current HKey_Users location.