The following table lists the options that you can configure
in the Windows registry and macOS plist to customize how the user
interacts with the GlobalProtect app.
Table: Customizable User
Behavior Options
Portal Agent Configuration
Windows Registry/
macOS Plist
Msiexec Parameter
Default
Allow User to Change Portal Address
can-change-portal yes | no
CANCHANGEPORTAL=”yes | no”
yes
Allow User to Dismiss Welcome
Page
enable-hide-welcome-page yes | no
ENABLEHIDEWELCOMEPAGE= ”yes | no”
yes
Allow User to Continue with Invalid
Portal Server Certificate
can-continue-if-portal-cert-invalid yes | no
CANCONTINUEIFPORTALCERT INVALID= ”yes | no”
yes
Allow User to Disable GlobalProtect App
disable-allowed yes | no
DISABLEALLOWED="yes | no"
no
Save User Credentials
Specify
a 0 to prevent GlobalProtect from saving credentials, a 1 to save
both username and password, or a 2 to save the username only.
save-user-credentials 0 | 1 | 2
SAVEUSERCREDENTIALS 0 | 1 | 2
n/a
Not in portal
The
Allow
user to save password
setting is deprecated in the web interface
in PAN-OS 7.1 and later releases but is configurable from the Windows registry
and macOS plist. Any value specified in the
