Deploy Agent Settings in the Mac Plist
You can set the GlobalProtect agent customization settings in the Mac global plist (Property list) file. This enables deployment of GlobalProtect agent settings to Mac endpoints prior to their first connection to the GlobalProtect portal.
On Mac systems, plist files are either located in /Library/Preferences or in ~/Library/Preferences. The tilde ( ~ ) symbol indicates that the location is in the current user's home folder. The GlobalProtect agent on a Mac client first checks for the GlobalProtect plist settings. If the plist does not exist at that location, the GlobalProtect agent searches for plist settings in ~/Library/Preferences.
In addition to using the Mac plist to deploy GlobalProtect agent settings, you can enable the GlobalProtect agent to collect specific Mac plist information from clients. You can then monitor the data and add it to a security rule as matching criteria. Device traffic that matches registry settings you have defined can be enforced according to the security rule. Additionally, you can set up custom checks to Collect Application and Process Data From Clients.
To use the Mac plist to deploy GlobalProtect agent settings:
- Open the GlobalProtect plist file and
locate the GlobalProtect agent customization settings.
- Use Xcode or an alternate plist editor to open the plist file: /Library/Preferences/com.paloaltonetworks.GlobalProtect.settings.plist
- Then go to: /Palo Alto Networks/GlobalProtect/Settings
- If the Settings dictionary does not exist, create it. Then add each key to the Settings dictionary as a string.
- Set the portal name.If you don’t want the user to manually enter the portal address even for the first connection, you can pre-deploy the portal address through the Mac plist. Under the PanSetup dictionary, configure an entry for Portal.
- Deploy various settings to the Mac client from the Mac
plist, including configuring the connect method for the GlobalProtect
agent and enabling single sign-on (SSO).View Customizable Agent Settings for a full list of the keys and values that you can configure using the Mac plist.
Deploy Scripts Using the Mac Plist
Deploy Scripts Using the Mac Plist When a user connects to the GlobalProtect gateway for the first time, the GlobalProtect agent downloads a configuration file ...
Deploy Agent Settings Transparently
Deploy Agent Settings Transparently As an alternative to deploying agent settings from the portal configuration, you can define them directly from the Windows registry or ...
Customizable Agent Settings
Customizable Agent Settings In addition to pre-deploying the portal address, you can also define the agent configuration settings. To Deploy Agent Settings to Windows Endpoints ...
Deploy Agent Settings to Mac Endpoints
Deploy Agent Settings to Mac Endpoints Use the Mac global plist (property list) file to set GlobalProtect agent customization settings for or to deploy scripts ...
Collect Application and Process Data From Clients
Collect Application and Process Data From Clients The Windows Registry and Mac Plist can be used to configure and store settings and options for Windows ...
Customize the GlobalProtect Agent
Customize the GlobalProtect Agent The portal agent configuration allows you to customize how your end users interact with the GlobalProtect agents installed on their systems ...
Dynamic GlobalProtect App Customization
Dynamic GlobalProtect App Customization You can now view all agent customization options and configure them from the new App tab in a GlobalProtect portal agent ...
Script Deployment Options
Script Deployment Options The following table displays options that enable GlobalProtect to initiate scripts before and after establishing a VPN tunnel and before disconnecting a ...
Network > GlobalProtect > Portals
Network > GlobalProtect > Portals Select Network > GlobalProtect > Portals to set up and manage a GlobalProtect™ portal. The portal provides the management functions ...