Changes to Default Behavior in GlobalProtect App 6.3
Changes to default behavior in GlobalProtect app 6.3.
The following topics describe changes to default behavior in GlobalProtect app 6.3:
Changes to Default Behavior in GlobalProtect App 6.3
(
Windows Only
) Starting with GlobalProtect app 6.3, the maximum
value for
User Switch Tunnel Rename Timeout
app
setting of the GlobalProtect portal configuration is increased from 600 sec
to 7200 secs. With this enhancement, you can configure the app to stay
connected for a longer period (the range is 0-7200 seconds, the default
value is 0) when end users switch the RDP connections. End users are
prompted to reenter their credentials and authenticate to the app when they
switch the RDP connections. GlobalProtect app will get disconnected if they
fail to reenter the credentials before the expiry of the set
User
Switch Tunnel Rename Timeout.
Previously, the time range that you can configure for
User Switch
Tunnel Rename Timeout
in the app settings was 0-600
secs.
Starting with GlobalProtect app 6.3, the
Connect with SSL
Only
option has been renamed. See the table below
information about the changes.
GlobalProtect Release Version
Available Options
GlobalProtect version earlier than 6.3
Field name:
Connect with SSL
Only
Yes
No
User can Change
This is
the default value.
GlobalProtect version 6.3 and later
Field name:
Advanced Control for Tunnel
Mode Behavior
No
Connect with SSL
Only
Connect with SSL Only - User can
Change
This is the default value.
IPSec Only
If you are using the existing
Connect with SSL Only
feature, the same
options will be available for you with no behavior change.
Starting with Content Release version 8845-8731, the
Autonomous
DEM endpoint agent for Prisma Access
parameter on the App
tab of the GlobalProtect portal in Panorama Managed Prisma Access been
renamed. The parameter name and available options depend on the
GlobalProtect release version in your environment.
GlobalProtect Release Version
Configuration Name
Configuration Options
GlobalProtect 6.3 and later
Access Experience (ADEM, App Acceleration,
End user coaching) for GP 6.3 and above (Windows
& MAC only)
Install the Agent
Uninstall the Agent
No action
This is the default value.
GlobalProtect 6.2 and earlier
Autonomous DEM endpoint agent for Prisma
Access for GP version 6.2 and
below
Install and user cannot
enable/disable agent from
GlobalProtect
Install and user can enable/disable
agent from GlobalProtect
Do not install
This is the default value.
There is no change if the Content Release version in your environment is
earlier than 8845-8731.
The GlobalProtect app now displays the following message when there are
network connectivity issues in the user environment:
The connection from this device to GlobalProtect Gateway has been
interrupted for the keep-alive timeout duration. Please check your
network connectivity and re-connect.
The maximum value for
User Switch Tunnel Rename Timeout
has been increased from 600 seconds to 7200 seconds. To set the value for this
parameter, follow the navigation path as follows:
Select
Network
GlobalProtect
Portals
.
Select a portal.
On the
Agent
tab, select the agent configuration
that you want to modify.
Select the
App
tab.
In the App Configurations area, specify the desired value
for