Customizable Agent Settings

In addition to pre-deploying the portal address, you can also define the agent configuration settings. To Deploy Agent Settings to Windows Endpoints you define keys in the Windows registry (HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect), or, to Deploy Agent Settings to Mac Endpoints you define entries in the PanSetup dictionary of the Mac plist (/Library/Preferences/com.paloaltonetworks.GlobalProtect.settings.plist). On Windows clients only, you can also use the Windows Installer to Deploy Agent Settings from Msiexec.
The following topics describe each customizable agent setting and group them by the setting type. Settings defined in the GlobalProtect portal agent configuration take precedence over settings defined in the Windows registry or the Mac plist.
Some settings do not have a corresponding portal configuration settings on the web interface, and must be configured using Windows registry or Msiexec. These additional settings include: can-prompt-user-credential, wrap-cp-guid, and filter-non-gpcp.

Related Documentation