In addition to pre-deploying the portal address, you can also define the app settings. To Deploy App Settings to
Windows Endpoints you define keys in the Windows Registry (path
HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect
unless otherwise stated). To Deploy App Settings to
macOS Endpoints you define entries in the PanSetup
dictionary of the macOS plist
(/Library/Preferences/com.paloaltonetworks.GlobalProtect.settings.plist).
On Windows endpoints only, you can also use the Windows Installer to Deploy App Settings
from Msiexec.
The following topics describe each customizable app setting.
Settings defined in the GlobalProtect portal agent configuration
take precedence over settings defined in the Windows Registry or
the macOS plist.
Some settings do not have a corresponding portal configuration
setting on the web interface and must be configured using the Windows
Registry or Msiexec. These include, but are not limited to, settings
such as the following: can-prompt-user-credential, wrap-cp-guid,
and filter-non-gpcp. They are listed
in the following options as “Not in portal.”
