Always On VPN Configuration

In an “always on” GlobalProtect configuration, the agent connects to the GlobalProtect portal upon user logon to submit user and host information and receive the client configuration. It then automatically establishes the VPN tunnel to the gateway specified in the client configuration delivered by the portal without end user intervention as shown in the following illustration.

To switch any of the previous remote access VPN configurations to an always-on configuration, you simply change the connect method:

Remote Access VPN (Authentication Profile)
Remote Access VPN (Certificate Profile)
Remote Access VPN with Two-Factor Authentication

Use the following procedure to switch to an Always On configuration.

Select
Network
GlobalProtect
Portals
and select the portal configuration to open it.
Select the
Agent
tab and then select the agent configuration you want to modify.
Select the
App
tab.
Select
User-logon (Always On)
as the
Connect Method
. Repeat this step for each agent configuration.
Click
OK
twice to save the agent configuration and the portal configuration and then
Commit
your changes.