GlobalProtect config

[Marlon Yu]

For schools that are already on the Palo Alto firewall, is the portal / vpn gateway defined in the GlobalProtect client editable by the user?

 

We have tried setting the can-change-portal registry key to “no” but it seems the client keeps ignoring it.

 

Marlon

 

[Dan Robinson]

Not sure if this is what you are asking Marlon, but I have found you need to manually sign out of the GP client prior to each time you want to connect to a new gateway.

Dan

--
You received this message because you are subscribed to the Google Groups "Techies for schools" group.
To unsubscribe from this group and stop receiving emails from it, send an email to techies-for-sch...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/techies-for-schools/SY8PR01MB899718FAE4C78D0AAE438B38B8DFA%40SY8PR01MB8997.ausprd01.prod.outlook.com.

[Marlon Yu]

Hi Dan,

 

Thanks for the reply. I’m actually looking to disable the ability of users to change the portal so they can’t connect to a new gateway.

 

Gemini says that the firewall sends down its own config to the GP client which overrides any initial settings (which makes sense). I’ve now asked N4L to check if there is a way to disable this at the firewall itself. I don’t want users fiddling with these settings and then submit a ticket saying “can’t connect to VPN”.  😊

 

Cheers,

 

Marlon

 

From: techies-f...@googlegroups.com <techies-f...@googlegroups.com> On Behalf Of Dan Robinson
Sent: Wednesday, December 10, 2025 10:05 AM
To: techies-f...@googlegroups.com
Subject: Re: [techies-for-schools] GlobalProtect config

 

CAUTION: This email originated from outside of Rangitoto College. Be careful about clicking on links or opening attachments. If in doubt, ask IT.

 

To view this discussion visit https://groups.google.com/d/msgid/techies-for-schools/CAJ6zaXwf251cgiWWPrZ_BSinQuYS2S%3DFPqQHSrUuhwfXG%3DW5JQ%40mail.gmail.com.