In an Always On VPN configuration, the
secure GlobalProtect connection is always on. The GlobalProtect
app connects to the GlobalProtect portal (upon user login) to submit
user and host information and retrieve the agent configuration.
After the app receives the agent configuration from the portal,
it automatically connects and establishes a VPN tunnel to the GlobalProtect
gateway that was specified in the agent configuration.