GlobalProtect connect via batch

[Alexis_Koch]

Hello, Our GlobalProtect Agent will be installed on different kind of PCs. Some external (the PCs of some suppliers or computer maintenance), and some internal (laptops with 3G connections). So I've chose the "on-demand" connection. For the internal laptops (Windows), I'd like to do a batch to launch the 3G connection, then when it's ok to launch and connect the VPN (users, passwords and gateway will already be saved). The 3G part is working, but I cant' find a way to launch the PanGPA.exe with options (something like PanGPA.exe -connect), which I'd use in a batch... Maybe there's an other way to do that, but this works nice with our old Checkpoint firewall and Secure remote... Thank you for your help!

[glastra1 · Accepted solution]

The easiest way is to configure 2 separate agent configuration. In the first one the external user group with   "on-demand" connection and in the second one with internal users using "always on" connection.

I think that the file doesn't accept parameters, the only thing is probably edit some settings, 

https://www.paloaltonetworks.com/documentation/61/globalprotect/globalprotect-admin-guide/set-up-the...

https://www.paloaltonetworks.com/documentation/61/globalprotect/globalprotect-admin-guide/set-up-the...

regards,

Gerardo.

[Alexis_Koch]

Thank you for the answer, that's what I did. It works, it's just a little more complicated to manage.