Always On VPN Configuration

In an “always on” GlobalProtect configuration, the agent connects to the GlobalProtect portal upon user logon to submit user and host information and receive the client configuration. It then automatically establishes the VPN tunnel to the gateway specified in the client configuration delivered by the portal without end user intervention as shown in the following illustration.
gp-user-logon.png
To switch any of the previous remote access VPN configurations to an always-on configuration, you simply change the connect method:
Use the following procedure to switch to an Always On configuration.
  1. Select NetworkGlobalProtectPortals and select the portal configuration to open it.
  2. Select the Agent tab and then select the agent configuration you want to modify.
  3. Select the App tab.
  4. Select User-logon (Always On) as the Connect Method. Repeat this step for each agent configuration.
  5. Click OK twice to save the agent configuration and the portal configuration and then Commit your changes.

Related Documentation