If necessary, you can disable the GlobalProtect
agent. For example, you might disable the agent if the GlobalProtect
virtual private network (VPN) is not working in a hotel and the
VPN failure prevents you from connecting to the Internet; after
disabling the GlobalProtect agent, you might be able to connect
to the Internet and have unsecured communication (without a VPN).
Whether,
how, how many times, and how long you can disable the GlobalProtect
agent depends on how the administrator configured your GlobalProtect
service. The configuration might prevent you from disabling the
agent or might allow you only to disable it after correctly responding
to a challenge.
If your configuration includes a challenge,
the GlobalProtect agent prompts for one of the following: the reason
you want to disable the agent, a passcode, or, for the strictest
security, a ticket number. The response to a challenge can simply
be a typed statement of why you want to disable the agent, or you
could be required to provide a passcode or ticket number. If the
challenge involves a passcode or ticket, we recommend you communicate
with a GlobalProtect administrator or a Help desk person about passcodes
and tickets by phone.
Before you can get a valid ticket number,
your endpoint displays a ticket request number that you must communicate
to your GlobalProtect administrator or a Help desk person. If your
disable request is approved, you will receive the valid ticket number
out of band, preferably by telephone.
Typically, an administrator
provides a passcode in advance, either in an email to you as a new
GlobalProtect user or posted on your organization’s website (or
by phone if in response to an outage or system issue).
The
following steps describe how to disable the agent and what to do
if you see a challenge: