You can set the GlobalProtect agent customization
settings in the Mac global plist (Property list) file. This enables
deployment of GlobalProtect agent settings to Mac endpoints prior
to their first connection to the GlobalProtect portal.
Mac systems, plist files are either located in /Library/Preferences
or in ~/Library/Preferences. The tilde ( ~ ) symbol indicates that
the location is in the current user's home folder. The GlobalProtect
agent on a Mac client first checks for the GlobalProtect plist settings.
If the plist does not exist at that location, the GlobalProtect
agent searches for plist settings in ~/Library/Preferences.
addition to using the Mac plist to deploy GlobalProtect agent settings,
you can enable the GlobalProtect agent to collect specific Mac plist
information from clients. You can then monitor the data and add
it to a security rule as matching criteria. Device traffic that
matches registry settings you have defined can be enforced according
to the security rule. Additionally, you can set up custom checks
Application and Process Data From Clients.
use the Mac plist to deploy GlobalProtect agent settings:
Open the GlobalProtect plist file and
locate the GlobalProtect agent customization settings.
Use Xcode or an alternate plist editor to
open the plist file:
not exist, create it. Then add each key to the
as a string.
Set the portal name.
If you don’t want the user to manually enter the portal
address even for the first connection, you can pre-deploy the portal
address through the Mac plist. Under the PanSetup dictionary, configure
an entry for
Deploy various settings to the Mac client from the Mac
plist, including configuring the connect method for the GlobalProtect
agent and enabling single sign-on (SSO).