>
    Ticket Request to Disable GlobalProtect
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Access
    3. Prisma Access Administration
    4. Prisma Access Mobile Users
    5. Mobile Users: GlobalProtect
    6. Ticket Request to Disable GlobalProtect
    Download PDF
    Prisma Access

    Ticket Request to Disable GlobalProtect

    Table of Contents

    Ticket Request to Disable GlobalProtect

    Instead of enabling users to directly disable GlobalProtect, you can allow a user to request for GlobalProtect to be disabled via a ticket.
    Where Can I Use This?What Do I Need?
    • Prisma Access (Managed by Strata Cloud Manager)
    • Prisma Access (Managed by Panorama)
    Instead of enabling users to directly disable GlobalProtect, you can allow a user to create a ticket in order to disable GlobalProtect. The GlobalProtect admin can then decide whether or not to allow each specific user to disable GlobalProtect.

    How It Works

    After you’ve set up this feature, here’s the workflow for a ticket request to disable GlobalProtect:
    • A user attempts to disable GlobalProtect in the GlobalProtect app. GlobalProtect displays a request number to the user.
    • The user shares the request number with the GlobalProtect admin.
    • The GlobalProtect admin logs in to Prisma Access (Managed by Strata Cloud Manager) and uses the request number to generate a ticket.
    • The GlobalProtect admin shares the ticket number with the user. The user enters the ticket number into the app to disable GlobalProtect.

    Set It Up

    Ticket Request to Disable GlobalProtect (Strata Cloud Manager)

    Instead of enabling users to directly disable GlobalProtect, you can allow a user to request for GlobalProtect to be disabled via a ticket.
    1. Set an Agent Override Key
      Before you can enable the option for ticket requests to disable GlobalProtect, you must first need to set an Agent User Override Key.
      Go to WorkflowsPrisma Access SetupGlobalProtectGlobalProtect AppGlobal App Settings and enter a four character key to set the Agent Override Key.
    2. Allow for GlobalProtect to be disabled with a ticket
      Go to WorkflowsPrisma Access SetupGlobalProtectGlobalProtect AppApp SettingsApp ConfigurationDisable GlobalProtect and set the option to Allow with Ticket.
    3. Generate a ticket
      After setting the Agent Override Key and the option to Allow with Ticket, you’ll be able to Generate Ticket.
      When a user attempts to disable GlobalProtect in the app, GlobalProtect will display a request number to them. Submit that request number here to generate a ticket for GlobalProtect to be disabled for that user.

    Ticket Request to Disable GlobalProtect (Panorama)

    Instead of enabling users to directly disable GlobalProtect, you can allow a user to request for GlobalProtect to be disabled via a ticket.
    1. Set an Agent Override Key
      Before you can enable the option for ticket requests to disable GlobalProtect, you must first need to set an Agent User Override Key.
      Go to NetworkGlobalProtectPortals and select the connection name your want to set an Override Key for. Select Agent and then enter a key to set the Agent Override Key.
    2. Allow for GlobalProtect to be disabled with a ticket
      Go to NetworkGlobalProtectPortals and select the connection name your want to Allow users to disconnect from. Select Agent, choose a Config, select AppApp ConfigurationsAllow user to disconnect GlobalProtect App (Always-on mode), and set the option to Allow with Ticket.
    3. Generate a ticket
      After setting the Agent Override Key and the option to Allow with Ticket, you’ll be able to Generate Ticket.
      When a user attempts to disable GlobalProtect in the app, GlobalProtect will display a request number to them. Submit that request number here to generate a ticket for GlobalProtect to be disabled for that user.

    © 2024 Palo Alto Networks, Inc. All rights reserved.