GlobalProtect
Deploy Scripts Using Msiexec
Table of Contents
Expand All
|
Collapse All
GlobalProtect Docs
-
9.1 (EoL)
- 10.1 & Later
- 9.1 (EoL)
-
-
-
- Deploy App Settings in the Windows Registry
- Deploy App Settings from Msiexec
- Deploy Scripts Using the Windows Registry
- Deploy Scripts Using Msiexec
- SSO Wrapping for Third-Party Credential Providers on Windows Endpoints
- Enable SSO Wrapping for Third-Party Credentials with the Windows Registry
- Enable SSO Wrapping for Third-Party Credentials with the Windows Installer
-
- Mobile Device Management Overview
- Set Up the MDM Integration With GlobalProtect
- Qualified MDM Vendors
-
- Remote Access VPN (Authentication Profile)
- Remote Access VPN (Certificate Profile)
- Remote Access VPN with Two-Factor Authentication
- Always On VPN Configuration
- Remote Access VPN with Pre-Logon
- GlobalProtect Multiple Gateway Configuration
- GlobalProtect for Internal HIP Checking and User-Based Access
- Mixed Internal and External Gateway Configuration
- Captive Portal and Enforce GlobalProtect for Network Access
-
-
- End User Experience
- Management and Logging in Panorama
-
- View a Graphical Display of GlobalProtect User Activity in PAN-OS
- View All GlobalProtect Logs on a Dedicated Page in PAN-OS
- Event Descriptions for the GlobalProtect Logs in PAN-OS
- Filter GlobalProtect Logs for Gateway Latency in PAN-OS
- Restrict Access to GlobalProtect Logs in PAN-OS
- Forward GlobalProtect Logs to an External Service in PAN-OS
- Configure Custom Reports for GlobalProtect in PAN-OS
- Monitoring and High Availability
-
- About GlobalProtect Cipher Selection
- Cipher Exchange Between the GlobalProtect App and Gateway
-
- Reference: GlobalProtect App Cryptographic Functions
-
- Reference: TLS Ciphers Supported by GlobalProtect Apps on macOS Endpoints
- Reference: TLS Ciphers Supported by GlobalProtect Apps on Windows 10 Endpoints
- Reference: TLS Ciphers Supported by GlobalProtect Apps on Windows 7 Endpoints
- Reference: TLS Ciphers Supported by GlobalProtect Apps on Android 6.0.1 Endpoints
- Reference: TLS Ciphers Supported by GlobalProtect Apps on iOS 10.2.1 Endpoints
- Reference: TLS Ciphers Supported by GlobalProtect Apps on Chromebooks
- Ciphers Used to Set Up IPsec Tunnels
- SSL APIs
-
6.3
- 6.3
- 6.2
- 6.1
- 6.0
- 5.1
-
- Download and Install the GlobalProtect App for Windows
- Use Connect Before Logon
- Use Single Sign-On for Smart Card Authentication
- Use the GlobalProtect App for Windows
- Report an Issue From the GlobalProtect App for Windows
- Disconnect the GlobalProtect App for Windows
- Uninstall the GlobalProtect App for Windows
- Fix a Microsoft Installer Conflict
-
- Download and Install the GlobalProtect App for macOS
- Use the GlobalProtect App for macOS
- Report an Issue From the GlobalProtect App for macOS
- Disconnect the GlobalProtect App for macOS
- Uninstall the GlobalProtect App for macOS
- Remove the GlobalProtect Enforcer Kernel Extension
- Enable the GlobalProtect App for macOS to Use Client Certificates for Authentication
-
6.1
- 6.1
- 6.0
- 5.1
-
6.3
- 6.3
- 6.2
- 6.1
- 6.0
- 5.1
End-of-Life (EoL)
Deploy Scripts Using Msiexec
On Windows endpoints, you can use the Windows Installer
(Msiexec) to deploy the GlobalProtect app, app settings, and scripts
that the app will run automatically (see Customizable App Settings). To do so, use the following syntax:
msiexec.exe /i GlobalProtect.msi <SETTING>="<value>"Msiexec is an executable program that installs or configures
a product from a command line. On systems running Microsoft Windows
XP or later releases, the maximum string length that you can use
at the command prompt is 8,191 characters.
This limitation
applies to the command line, individual environment variables (such
as the USERPROFILE variable) that are inherited by other processes,
and all environment variable expansions. If you run batch files
from the command line, this limitation also applies to batch file
processing.
For example, to deploy scripts that run at specific connect or
disconnect events, you can use syntax similar to the following examples:
Example: Use Msiexec to Deploy Scripts that Run Before a Connect Event
For a script
that you can copy and paste, go here.
msiexec.exe /i GlobalProtect.msi PREVPNCONNECTCOMMAND="%userprofile%\pre_vpn_connect.bat c: test_user" PREVPNCONNECTCONTEXT="user" PREVPNCONNECTTIMEOUT="60" PREVPNCONNECTFILE="C:\Users\test_user\pre_vpn_connect.bat" PREVPNCONNECTCHECKSUM="a48ad33695a44de887bba8f2f3174fd8fb01a46a19e3ec9078b011 8647ccf599" PREVPNCONNECTERRORMSG="Failed executing pre-vpn-connect action."
For
a complete list of settings and the corresponding default values,
see Customizable App Settings.
Example: Use Msiexec to Deploy Scripts that Run at Pre-Connect, Post-Connect, and Pre-Disconnect Events
For a script that you can copy and paste, go here.
msiexec.exe /i GlobalProtect.msi PREVPNCONNECTCOMMAND="%userprofile%\pre_vpn_connect.bat c: test_user" PREVPNCONNECTCONTEXT="user" PREVPNCONNECTTIMEOUT="60" PREVPNCONNECTFILE="C:\Users\test_user\pre_vpn_connect.bat" PREVPNCONNECTCHECKSUM="a48ad33695a44de887bba8f2f3174fd8fb01a46a19e3ec9078b011 8647ccf599" PREVPNCONNECTERRORMSG="Failed executing pre-vpn-connect action." POSTVPNCONNECTCOMMAND="c:\users\test_user\post_vpn_connect.bat c: test_user" POSTVPNCONNECTCONTEXT="admin" POSTVPNCONNECTFILE="%userprofile%\post_vpn_connect.bat" POSTVPNCONNECTCHECKSUM="b48ad33695a44de887bba8f2f3174fd8fb01a46a19e3ec9078b011 8647ccf598" POSTVPNCONNECTERRORMSG="Failed executing post-vpn-connect action." PREVPNDISCONNECTCOMMAND="%userprofile%\pre_vpn_disconnect.bat c: test_user" PREVPNDISCONNECTCONTEXT="admin" PREVPNDISCONNECTTIMEOUT="0" PREVPNDISCONNECTFILE="C:\Users\test_user\pre_vpn_disconnect.bat" PREVPNDISCONNECTCHECKSUM="c48ad33695a44de887bba8f2f3174fd8fb01a46a19e3ec9078b0 118647ccf597" PREVPNDISCONNECTERRORMSG="Failed executing pre-vpn-disconnect action."
For
a complete list of settings and the corresponding default values,
see Customizable App Settings.