06-17-2022 11:29 AM
The article is the admin setup of Always-On in the Global Protect VPN Portal configuration. Always-On is an admin-enforced property (pushed to the GP clients along with a lot of other settings) that forces the client to always try to connect to the VPN when starting up and does not allow the client to send traffic outside of the VPN.
There are separate admin settings for whether the GP client can save VPN login credentials for reuse or use a Windows/etc. single sign on. All of these are set by the administrator. The GP client can not change or modify the settings sent by the Portal, you can only choose which Portal to connect to. (If your admin wants, they could setup different Portals/different user groups with different login settings for you).
