GlobalProtect 6.0.7 Portal Script

DrumBum213
New Contributor III

Hey everyone. I was recently asked to upgrade our GlobalProtect to 6.0.7. After some extensive searching on JAMF Nation I was able to piece a good script together that will add your portal connection(s) to the install. Create your package and the following script...

#!/bin/sh
sudo rm -f /Library/Preferences/com.paloaltonetworks.GlobalProtect.settings.plist
#
# Set the portal address for GlobalProtect
#

portalAddress="YOURCONNECTION"

#
# Modify PLIST to reflect the correct portal address.
#

echo '<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>Palo Alto Networks</key><dict><key>GlobalProtect</key><dict><key>PanSetup</key><dict><key>Portal</key><string>'$portalAddress'</string><key>Prelogon</key><integer>0</integer></dict></dict></dict></dict></plist>' >> /Library/Preferences/com.paloaltonetworks.GlobalProtect.settings.plist

sudo rm -rf /Users/*/Library/Application Support/PaloAltoNetworks/GlobalProtect
sudo rm -rf /Users/*/Library/Preferences/com.paloaltonetworks.GlobalProtect*
sudo rm -rf /Users/*/Library/Preferences/PanGPS*
pkill -f GlobalProtect

3 REPLIES 3

sdagley
Esteemed Contributor II

@DrumBum213 FYI Palo Alto Networks has produced updated documentation on how to deploy Global Protect via Jamf Pro: https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/mobile-endpoint-management/...

jtrant
Valued Contributor

Can PAN GP 6.x now handle the preconfiguration of multiple portal URLs?

efil4xiN
Contributor II

Leaving here as it tripped me up for 10 mins. Run the script BEFORE the installation