If your administrator configures the GlobalProtect
connect method as Always On, you can disconnect
the GlobalProtect app if you have a good reason. For example, you
might want to disconnect the app if the GlobalProtect virtual private
network (VPN) is not working in a hotel, and the VPN failure prevents
you from connecting to the internet. After disconnecting the GlobalProtect
app, you can connect to the internet using unsecured communication
(without a VPN).
The method, amount of time, and number of
times for which you can disconnect e the GlobalProtect app depends
on how the administrator configures your GlobalProtect service (PanGPS).
This configuration can prevent you from disconnecting the app entirely
or allow you to disconnect the app only after responding to a challenge
correctly.
If your configuration includes a challenge, the
GlobalProtect app prompts you for one of the following:
If the challenge requires a
passcode or ticket number, we recommend that you contact a GlobalProtect
administrator or Help Desk person by phone.
Administrators
typically provide passcodes in advance, either through email (for
new GlobalProtect users) or posted on your organization’s website.
In response to an outage or system issue, administrators may also
provide passcodes by phone.
Before you can obtain a valid
ticket number, your endpoint displays a ticket request number that
you must communicate to your GlobalProtect administrator or Help
Desk person. If your disconnect request is approved, you will receive
a valid ticket number that you can use to disconnect GlobalProtect.
The
following steps describe how to disconnect the app and pass a challenge: