If your administrator configures the GlobalProtect
connect method as Always On, you can disable
the GlobalProtect app. For example, you might want to disable the
app if the GlobalProtect virtual private network (VPN) is not working
in a hotel, and the VPN failure prevents you from connecting to
the internet. After disabling the GlobalProtect app, you can connect
to the internet using unsecured communication (without a VPN).
The
method, amount of time, and number of times for which you can disable the
GlobalProtect app depends on how the administrator configures your
GlobalProtect service (PanGPS). This configuration can prevent you
from disabling the app entirely or allow you to disable the app
only after responding to a challenge correctly.
If your configuration
includes a challenge, the GlobalProtect app prompts you for one
of the following:
If the challenge requires a
passcode or ticket number, we recommend that you contact a GlobalProtect
administrator or Help Desk person by phone.
Administrators
typically provide passcodes in advance, either through email (for
new GlobalProtect users) or posted on your organization’s website.
In response to an outage or system issue, administrators may also
provide passcodes by phone.
Before you can obtain a valid
ticket number, your endpoint displays a ticket request number that
you must communicate to your GlobalProtect administrator or Help
Desk person. If your disable request is approved, you will receive
a valid ticket number that you can use to disable GlobalProtect.
The
following steps describe how to disable the app and pass a challenge: