GlobalProtect Always On VPN Configuration

In an “Always On” GlobalProtect configuration, the app connects to the GlobalProtect portal (upon user login) to submit user and host information and receive the client configuration. The app then automatically connects and establishes a VPN tunnel to the gateway that was specified in the client configuration delivered by the portal, as shown in the following image:

To switch one of the following remote access VPN configurations to an Always On configuration, you can change the connect method:

Remote Access VPN (Authentication Profile)
Remote Access VPN (Certificate Profile)
Remote Access VPN with Two-Factor Authentication

Use the following steps to switch a remote access VPN configuration to an Always On configuration.

Select
Network
GlobalProtect
Portals
, and then select a portal configuration.
On the
Agent
tab, select the agent configuration that you want to modify.
Select
App
, and then set the
Connect Method
to
User-logon (Always On)
.
Click
OK
to save the agent configuration.
Repeat steps 2-4 for each agent configuration that you want to modify.
Click
OK
to save the portal configuration, and then
Commit
your changes.