Disable the GlobalProtect App for Linux

If your administrator configures the GlobalProtect connect method as Always On, you can disable the GlobalProtect app. For example, you might want to disable the app if the GlobalProtect virtual private network (VPN) is not working in a hotel, and the VPN failure prevents you from connecting to the internet. After disabling the GlobalProtect app, you can connect to the internet using unsecured communication (without a VPN).
The method, amount of time, and number of times for which you can disable the GlobalProtect app depends on how the administrator configures your GlobalProtect service. This configuration can prevent you from disabling the app entirely or allow you to disable the app only after responding to a challenge correctly.
If your configuration includes a challenge, the GlobalProtect app prompts for one of the following:
  • Reason you want to disable the app
  • Passcode
  • Ticket number
If the challenge involves a passcode or ticket number, we recommend that you contact a GlobalProtect administrator or Help Desk person by phone.
Administrators typically provide passcodes in advance, either through email (for new GlobalProtect users) or posted on your organization’s website. In response to an outage or system issue, administrators may also provide passcodes by phone.
Before you can obtain a valid ticket number, your endpoint displays a ticket request number that you must communicate to your GlobalProtect administrator or a Help Desk person. If your disable request is approved, you will receive a valid ticket number that you can use to disable GlobalProtect.
The following steps describe how to disable the app and pass a challenge:
  • (Available in on-demand mode only) Disconnect from GlobalProtect:
    Use the globalprotect disconnect command to disconnect from GlobalProtect.
    user@linuxhost:~$ globalprotect disconnect 
    Disconnected
  • (Available in always-on mode only) Disable GlobalProtect:
    Use the globalprotect disable command to disconnect and disable the GlobalProtect app. If your configuration requires it, you must also specify a reason (using the --reason “<reason> option) or a passcode (using the --passcode <passcode> option).
    user@linuxhost:~$ globalprotect disable
    user@linuxhost:~$ globalprotect disable --reason “This is my reason for disabling GlobalProtect
    user@linuxhost:~$ globalprotect disable --passcode ITp@ssw0rd

Related Documentation