| Where Can I Use This? | What Do I Need? |
|---|
- NGFW (managed by Panorama or Strata Cloud Manager)
- Prisma Access (managed by Panorama or Strata Cloud
Manager)
|
- GlobalProtect Gateway license or Prisma Access license with
the Mobile User subscription
|
In an “Always On” GlobalProtect configuration, the app connects to the GlobalProtect
portal (upon user login) to submit user and host information and receive the client
configuration. The app then automatically connects and establishes a VPN tunnel to
the gateway that was specified in the client configuration delivered by the portal,
as shown in the following image:
To switch one of the following remote access VPN configurations to an Always On
configuration, you can change the connect method:
Use the following steps to switch a remote access VPN configuration to an Always On
configuration.
GlobalProtect Always On VPN Configuration - Panorama
Select , and then select a portal configuration.
On the
Agent tab, select the agent configuration that
you want to modify.
Select
App, and then set the
Connect
Method to
User-logon (Always On).
Click
OK to save the agent configuration.
Repeat steps 2-4 for each agent configuration that you want to modify.
Click OK to save the portal configuration, and then
Commit your changes.
GlobalProtect Always On VPN Configuration - SCM
On Strata Cloud Manager, select .
In Agent App Settings, select the agent configuration that you want to
modify.
In App Configuration, and set
Connect to
User-logon (Always On).
Click
OK to save the agent configuration.
Repeat steps 2-4 for each agent configuration that you want to modify.
Click OK to save the portal configuration, and then
Commit your changes.
