GlobalProtect
Customize the GlobalProtect Portal Login, Welcome, and Help Pages
Table of Contents
Expand All
|
Collapse All
GlobalProtect Docs
-
10.1 & Later
- 10.1 & Later
- 9.1 (EoL)
-
- How Does the App Know Which Certificate to Supply?
- Set Up Cloud Identity Engine Authentication
- Configure GlobalProtect to Facilitate Multi-Factor Authentication Notifications
- Enable Delivery of VSAs to a RADIUS Server
- Enable Group Mapping
-
-
- GlobalProtect App Minimum Hardware Requirements
- Download the GlobalProtect App Software Package for Hosting on the Portal
- Host App Updates on the Portal
- Host App Updates on a Web Server
- Test the App Installation
- Download and Install the GlobalProtect Mobile App
- View and Collect GlobalProtect App Logs
-
-
- Deploy App Settings in the Windows Registry
- Deploy App Settings from Msiexec
- Deploy Scripts Using the Windows Registry
- Deploy Scripts Using Msiexec
- Deploy Connect Before Logon Settings in the Windows Registry
- Deploy GlobalProtect Credential Provider Settings in the Windows Registry
- SSO Wrapping for Third-Party Credential Providers on Windows Endpoints
- Enable SSO Wrapping for Third-Party Credentials with the Windows Registry
- Enable SSO Wrapping for Third-Party Credentials with the Windows Installer
- Deploy App Settings to Linux Endpoints
- GlobalProtect Processes to be Whitelisted on EDR Deployments
-
-
- Mobile Device Management Overview
- Set Up the MDM Integration With GlobalProtect
- Qualified MDM Vendors
-
-
- Set Up the Microsoft Intune Environment for Android Endpoints
- Deploy the GlobalProtect App on Android Endpoints Using Microsoft Intune
- Create an App Configuration on Android Endpoints Using Microsoft Intune
- Configure Lockdown Mode for Always On Connect Method on Android Endpoints Using Microsoft Intune
-
- Deploy the GlobalProtect Mobile App Using Microsoft Intune
- Configure an Always On VPN Configuration for iOS Endpoints Using Microsoft Intune
- Configure a User-Initiated Remote Access VPN Configuration for iOS Endpoints Using Microsoft Intune
- Configure a Per-App VPN Configuration for iOS Endpoints Using Microsoft Intune
-
-
-
- Create a Smart Computer Group for GlobalProtect App Deployment
- Create a Single Configuration Profile for the GlobalProtect App for macOS
- Deploy the GlobalProtect Mobile App for macOS Using Jamf Pro
-
- Enable GlobalProtect System Extensions on macOS Endpoints Using Jamf Pro
- Enable GlobalProtect Network Extensions on macOS Big Sur Endpoints Using Jamf Pro
- Add a Configuration Profile for the GlobalProtect Enforcer by Using Jamf Pro 10.26.0
- Verify Configuration Profiles Deployed by Jamf Pro
- Remove System Extensions on macOS Monterey Endpoints Using Jamf Pro
- Non-Removable System Extensions on macOS Sequoia Endpoints Using Jamf Pro
- Uninstall the GlobalProtect Mobile App Using Jamf Pro
-
- Configure HIP-Based Policy Enforcement
- Configure HIP Exceptions for Patch Management
- Collect Application and Process Data From Endpoints
- Redistribute HIP Reports
-
- Identification and Quarantine of Compromised Devices Overview and License Requirements
- View Quarantined Device Information
- Manually Add and Delete Devices From the Quarantine List
- Automatically Quarantine a Device
- Use GlobalProtect and Security Policies to Block Access to Quarantined Devices
- Redistribute Device Quarantine Information from Panorama
- Troubleshoot HIP Issues
-
-
- Enable and Verify FIPS-CC Mode on Windows Endpoints
- Enable and Verify FIPS-CC Mode on macOS Endpoints
- Enable and Verify FIPS-CC Mode Using Workspace ONE on iOS Endpoints
- Enable FIPS Mode on Linux EndPoints with Ubuntu or RHEL
- Enable and Verify FIPS-CC Mode Using Microsoft Intune on Android Endpoints
- FIPS-CC Security Functions
- Resolve FIPS-CC Mode Issues
-
-
- Remote Access VPN (Authentication Profile)
- Remote Access VPN (Certificate Profile)
- Remote Access VPN with Two-Factor Authentication
- GlobalProtect Always On VPN Configuration
- Remote Access VPN with Pre-Logon
- User-Initiated Pre-Logon Connection
- GlobalProtect Multiple Gateway Configuration
- GlobalProtect for Internal HIP Checking and User-Based Access
- Mixed Internal and External Gateway Configuration
- Captive Portal and Enforce GlobalProtect for Network Access
- GlobalProtect on Windows 365 Cloud PC
-
- About GlobalProtect Cipher Selection
- Cipher Exchange Between the GlobalProtect App and Gateway
-
- Reference: GlobalProtect App Cryptographic Functions
-
- Reference: TLS Ciphers Supported by GlobalProtect Apps on macOS Endpoints
- Reference: TLS Ciphers Supported by GlobalProtect Apps on Windows Endpoints
- Reference: TLS Ciphers Supported by GlobalProtect Apps on Android 6.0.1 Endpoints
- Reference: TLS Ciphers Supported by GlobalProtect Apps on iOS 10.2.1 Endpoints
- Reference: TLS Ciphers Supported by GlobalProtect Apps on Chromebooks
- Ciphers Used to Set Up IPsec Tunnels
- SSL APIs
-
- View a Graphical Display of GlobalProtect User Activity in PAN-OS
- View All GlobalProtect Logs on a Dedicated Page in PAN-OS
- Event Descriptions for the GlobalProtect Logs in PAN-OS
- Filter GlobalProtect Logs for Gateway Latency in PAN-OS
- Restrict Access to GlobalProtect Logs in PAN-OS
- Forward GlobalProtect Logs to an External Service in PAN-OS
- Configure Custom Reports for GlobalProtect in PAN-OS
-
6.3
- 6.3
- 6.2
- 6.1
- 6.0
- 5.1
-
- Download and Install the GlobalProtect App for Windows
- Use Connect Before Logon
- Use Single Sign-On for Smart Card Authentication
- Use the GlobalProtect App for Windows
- Report an Issue From the GlobalProtect App for Windows
- Disconnect the GlobalProtect App for Windows
- Uninstall the GlobalProtect App for Windows
- Fix a Microsoft Installer Conflict
-
- Download and Install the GlobalProtect App for macOS
- Use the GlobalProtect App for macOS
- Report an Issue From the GlobalProtect App for macOS
- Disconnect the GlobalProtect App for macOS
- Uninstall the GlobalProtect App for macOS
- Remove the GlobalProtect Enforcer Kernel Extension
- Enable the GlobalProtect App for macOS to Use Client Certificates for Authentication
-
6.1
- 6.1
- 6.0
- 5.1
-
6.3
- 6.3
- 6.2
- 6.1
- 6.0
- 5.1
Customize the GlobalProtect Portal Login, Welcome, and Help Pages
GlobalProtect provides default login, welcome,
and/or help pages. However, you can create your own custom pages
with your corporate branding, acceptable use policies, and links
to your internal resources.
You can alternatively disable
browser access to the portal login page in order to prevent unauthorized
attempts to authenticate to the GlobalProtect portal (configure
the Portal Login PageDisable option
from NetworkGlobalProtectPortals<portal_configGeneral). With the portal login
page disabled, you can instead use a software distribution tool,
such as Microsoft’s System Center Configuration Manager (SCCM),
to allow your users to download and install the GlobalProtect app.
- Export the default portal login, home, welcome, or help page.
- Select DeviceResponse Pages.
- Select the link for the corresponding GlobalProtect portal page, such as GlobalProtect Portal Login Page.
- Select the predefined Default page and click Export.
- Edit the exported page.
- Use the HTML text editor of your choice to open and edit the page.
- To edit the login or home page, configure any of the following variables:
- GlobalProtect Portal Login Page:Label NumberVariableDescriptionExample1
favicon URL of the icon displayed in the address bar of the web browser.var favicon = 'http:// cdn.slidesharecdn. com/logo-24x24. jpg?3975762018';
2logo URL of the company logo.var logo = 'http:// cdn.slidesharecdn. com/logo-96x96. jpg?1382722588';
3bg_color Login page background color.var bg_color = '#D3D3D3';
4gp_portal_name Text displayed under the company logo.var gp_portal_name = 'GlobalProtect Portal';
5gp_portal_name_color Color of the text displayed under the company logo.var gp_portal_name_ color = '#000000';
6error_text_color Text color for logon failure messages.var error_text_ color = '#196390';
- GlobalProtect Portal Home Page:Label NumberVariableDescriptionExample1
favicon URL of the icon displayed in the address bar of the web browser.var favicon = 'http:// cdn.slidesharecdn. com/logo-24x24. jpg?3975762018';
2logo URL of the company logo.var logo = 'http:// cdn.slidesharecdn. com/logo-96x96. jpg?1382722588';
3navbar_text Navigation bar text.var navbar_text = 'GlobalProtect';
4navbar_text_color Navigation bar text color.var navbar_text_ color = '#D3D3D3';
5navbar_bg_color Navigation bar background color.var navbar_bg_color = '#A9A9A9';
6dropdown_bg_color Drop-down menu background color.var dropdown_bg_ color = '#FFFFFF';
7bg_color Home page background color.var bg_color = '#D3D3D3';
8label_custom_app_url Label for custom/internal application URLs.var label_custom_ app_url = 'Application URL';
9display_globalprotect_agentOption to display or hide the GlobalProtect app download button. Enter 1 to display the download button. Enter 0 to hide the download button.var display_ globalprotect_agent = 1;
10label_globalprotect_agentLabel for the GlobalProtect app download button.var label_ globalprotect_agent = 'GlobalProtect Agent';
11gp_portal_name Text displayed under the company logo on the portal logout page.var gp_portal_name = 'GlobalProtect Portal';
12gp_portal_name_color Color of the text displayed under the company logo on the portal logout page.var gp_portal_name_ color = '#000000';
13logout_text_array Messages displayed on the portal logout page after users log out of the portal.You can only modify the existing messages; you cannot add new messages or delete any existing messages.var logout_text_ array = ["You have successfully logged out of GlobalProtect portal.", "GlobalProtect Gateway is not licensed. Contact system administrator.", "User not authenticated to GlobalProtect portal.", "System error, contact system administrator.", "System error, failed to delete user session. Contact system administrator.", "Can not create user session. Max-capacity reached. Contact system administrator."];
14logout_text_color Text color for messages displayed on the portal logout page after users log out of the portal.var logout_text_ color = '#000000';
- Save the edited page with a new filename. Make sure that the page retains its UTF-8 encoding.
To set the GlobalProtect App Help Page to provide assistance to users with the GlobalProtect app:- Select NetworkGlobalProtectPortals, and then Add a portal.
- Select General.
- In the Appearance area, select the factory-default help page, Import a custom help page, or select None to remove the Help option from the Settings menu of the GlobalProtect status panel.
- Click OK and Commit the changes.
- Import the new page(s).
- Select DeviceResponse Pages.
- Select the link for the corresponding GlobalProtect portal page.
- Import the new portal page. Enter the path and filename in the Import File field or Browse to locate and select the file.
- (Optional) Select the virtual system on which this page will be used from the Destination drop-down or select shared (default) to make it available to all virtual systems.
- Click OK to import the file.
- Configure the portal to use the new page(s).
- Portal Login Page, Portal Landing
Page, and App Help Page:
- Select NetworkGlobalProtectPortals.
- Select the portal to which you want to add the login, landing (home), or app help page.
- In the Appearance area of the General tab, select the new page from the relevant drop-down.
- Custom Welcome Page:
- Select NetworkGlobalProtectPortals.
- Select the portal to which you want to add the welcome page.
- On the Agent tab, select the agent configuration to which you want to add the welcome page.
- On the App tab, select the new page from the Welcome Page drop-down.
- Click OK to save the agent configuration.
- Portal Login Page, Portal Landing
Page, and App Help Page:
- Save the portal configuration.Click OK to save the portal configuration, and then Commit your changes.
- Verify that the new page displays.
- Test the login page—Open a web browser and go to the URL for your portal (do not add the :4443 port number to the end of the URL or you will be directed to the web interface for the firewall). For example, enter https://myportal rather than https://myportal:4443. The new portal login page will display.
- Test the home page—Open a web browser and go to the URL for your portal (do not add the :4443 port number to the end of the URL or you will be directed to the web interface for the firewall). For example, enter https://myportal rather than https://myportal:4443. Enter your Username and Password, and then LOG IN to the portal. The new portal home page will display.
- Test the help page—Click the GlobalProtect system tray
icon to launch the GlobalProtect app. When the status panel opens,
click the settings icon (
- Test the welcome page—Click the GlobalProtect system
tray icon to launch the GlobalProtect app. When the status panel
opens, click the settings icon (