For increased flexibility, you can now allow a user to disable the GlobalProtect app without providing a comment, passcode, or ticket number. Starting in PAN-OS 7.1, you can configure the
Allow User to Disable GlobalProtect App
option from a
GlobalProtect portal agent configuration . In earlier releases, this option was only available in the Windows registry and Mac global property list (plist). Settings defined in the GlobalProtect portal agent configuration take precedence over settings defined in the Windows registry or the Mac plist.
