User Behavior Options
The following table lists the options that you can configure in the Windows registry and macOS plist to customize how the user interacts with the GlobalProtect app.
Portal Agent Configuration
Windows Registry/ macOS Plist
Allow User to Change Portal Address
can-change-portal yes | no
CANCHANGEPORTAL=”yes | no”
Allow User to Dismiss Welcome Page
enable-hide-welcome-page yes | no
ENABLEHIDEWELCOMEPAGE= ”yes | no”
Allow User to Continue with Invalid Portal Server Certificate
can-continue-if-portal-cert-invalid yes | no
CANCONTINUEIFPORTALCERT INVALID= ”yes | no”
Allow User to Disable GlobalProtect App
disable-allowed yes | no
DISABLEALLOWED="yes | no"
Save User Credentials
Specify a 0 to prevent GlobalProtect from saving credentials, a 1 to save both username and password, or a 2 to save the username only.
save-user-credentials 0 | 1 | 2
SAVEUSERCREDENTIALS 0 | 1 | 2
Not in portal
The Allow user to save password setting is deprecated in the web interface in PAN-OS 7.1 and later releases but is configurable from the Windows registry and macOS plist. Any value specified in the Save User Credentials field overwrites a value specified here.
can-save-password yes | no
CANSAVEPASSWORD=”yes | no”
App Behavior Options
App Behavior Options The following table lists the options that you can configure in the Windows Registry and macOS plist to customize the behavior of ...
App Display Options
App Display Options The following table lists the options that you can configure in the Windows Registry and macOS plist to customize the display of ...
Customizable App Settings
Customizable App Settings In addition to pre-deploying the portal address, you can also define the app settings. To Deploy App Settings to Windows Endpoints you ...
Collect Application and Process Data From Endpoints
Collect Application and Process Data From Endpoints The Windows Registry and macOS plist can be used to configure and store settings for Windows and Mac ...
Customize the GlobalProtect App
Customize the GlobalProtect App The portal agent configuration allows you to customize how your end users interact with the GlobalProtect apps installed on their endpoints. ...
Remote Access VPN with Pre-Logon
Remote Access VPN with Pre-Logon Pre-logon is a connect method that establishes a VPN tunnel before a user logs in. The purpose of pre-logon is ...
Define the GlobalProtect Agent Configurations
Define the GlobalProtect Agent Configurations After a GlobalProtect user connects to the portal and is authenticated by the GlobalProtect portal, the portal sends the agent ...
Set Up Kerberos Authentication
Set Up Kerberos Authentication Kerberos is a computer network authentication protocol that uses tickets to allow nodes that communicate over a non-secure network to prove ...
Deploy App Settings Transparently
Deploy App Settings Transparently As an alternative to deploying app settings from the portal configuration, you can define them directly from the Windows Registry, global ...