Focus

What's New in the NetSec Platform

Conditional Connect Method for GlobalProtect

Table of Contents

Conditional Connect Method for GlobalProtect

Learn how to have the GlobalProtect app dynamically change the connect method.

To improve the user experience with GlobalProtect, you can now use the Conditional Connect setting to have GlobalProtect dynamically change the connect method based on whether the user is on the internal network or working from a remote location. This is useful in environments where you require your users to connect to GlobalProtect at all times when in the office (Always On mode), but don’t require them to connect to GlobalProtect when they are away from the office except when they need access to your private apps.

With Conditional Connect, GlobalProtect uses internal host detection (IHD) to determine whether the user is on the internal network and then sets the connect method accordingly.

To configure this feature, you must deploy the conditional-connect setting to the endpoint transparently to the Windows Registry or macOS plist. For the feature to work, you must also enable internal host detection and configure the endpoints to use the On-demand connect method.

May 2023

Enhanced Split Tunnel Configuration