If your administrator configures the GlobalProtect
connect method as Always On, you can disconnect
the GlobalProtect app. For example, you might want to disconnect
the app if the GlobalProtect virtual private network (VPN) is not
working in a hotel, and the VPN failure prevents you from connecting
to the internet. After disconnecting the GlobalProtect app, you
can connect to the internet using unsecured communication (without
a VPN).
The method, amount of time, and number of times for
which you can disconnect the GlobalProtect app depends on how the
administrator configures your GlobalProtect service (PanGPS). This
configuration can prevent you from disconnecting the app entirely
or allow you to disconnect the app only after responding to a challenge
correctly.
If your configuration includes a challenge, the
GlobalProtect app prompts for one of the following:
If the challenge involves a
passcode or ticket number, we recommend that you contact a GlobalProtect
administrator or Help Desk person by phone.
Administrators
typically provide passcodes in advance, either through email (for
new GlobalProtect users) or posted on your organization’s website.
In response to an outage or system issue, administrators may also
provide passcodes by phone.
Before you can obtain a valid
ticket number, your endpoint displays a ticket request number that
you must communicate to your GlobalProtect administrator or a Help
Desk person. If your disconnect request is approved, you will receive
a valid ticket number that you can use to disconnect GlobalProtect.
The
following steps describe how to disconnect the app and pass a challenge: