Panorama

Set an Agent Override Key

Before you can enable the option for ticket requests to disable GlobalProtect, you must first need to set an Agent User Override Key.

Go to

Network

GlobalProtect

Portals

and select the connection name your want to set an Override Key for. Select

Agent

and then enter a key to set the

Agent Override Key

.



Allow for GlobalProtect to be disabled with a ticket

Go to

Network

GlobalProtect

Portals

and select the connection name your want to Allow users to disconnect from. Select

Agent

, choose a

Config

, select

App

App Configurations

Allow user to disconnect GlobalProtect App (Always-on mode)

, and set the option to

Allow with Ticket

.



Generate a ticket

After setting the

Agent Override Key

and the option to

Allow with Ticket

, you’ll be able to

Generate Ticket

.

When a user attempts to disable GlobalProtect in the app, GlobalProtect will display a request number to them. Submit that request number here to generate a ticket for GlobalProtect to be disabled for that user.