GlobalProtect Portals Agent User/User Group Tab

Select
Network
GlobalProtect
Portals
<GlobalProtect-portal-config>
Agent
<agent-config>
User/User Group
to specify the operating systems and users or user groups to which this agent configuration applies. If this agent configuration cannot accommodate all combinations of operating systems and users capabilities, consider adding another agent configuration. If you have multiple agent configurations that are differentiated by operating systems and users or user groups, the most specific configurations should be at the top of the table in Agent and the most general (such as any OS and a broad group membership) at the bottom. You can move an agent configuration up or down as needed.
For groups, the only supported type of authentication service is LDAP.
GlobalProtect Portal Client User/User Group Configuration Settings
Description
OS
A user or group member can have multiple devices whose operating systems differ from each other (for example, a user with one endpoint running Windows OS and another endpoint running Mac OS). The portal can provide configurations that are specific to the OS on each endpoint. For the current agent configuration, you can
Add
one or more client operating systems to specify which clients receive the configuration. A portal automatically learns the OS of the client device and incorporates details for that OS in the client configuration. You can select
Any
OS or a specific OS (
Android
,
Chrome
,
iOS
,
Linux
,
Mac
,
Windows
, or
WindowsUWP
); you can also select more than one OS. The information in User/User Groups describes how you can further differentiate by selection of users, user groups, and choice of any, pre-logon or select.
User/User Group
You can
Add
individual users or user groups to which the current agent configuration applies.
You must configure group mapping (
Device
User Identification
Group Mapping Settings
) before you can select the groups.
In addition to users and groups, you can use the drop-down to specify when these settings apply to the users or groups:
  • any
    —The agent configuration applies to all users (no need to
    Add
    users or user groups).
  • select
    —The agent configuration applies only to users and user groups you
    Add
    to this list.
  • pre-logon
    —The agent configuration applies only to the users and user groups you
    Add
    that also are configured for pre-logon or pre-logon then on-demand. The pre-logon option applies to pre-logon users before they log in to their system. To use the
    pre-logon
    option, you must also enable a pre-logon (or pre-logon then on-demand) Connect Method in the
    App
    tab for this agent configuration. If you specify a pre-logon Connect Method but specify
    any
    users or groups, the configuration applies to pre-logon users before and after they log in.

Recommended For You