Hardware reference guide

GlobalProtect Administrator’s Guide 45
Set Up the GlobalProtect Infrastructure Configure the GlobalProtect Portal
Step 3 Specify whether users can disconnect
from GlobalProtect.
This only applies to client configurations
that have the
Connect Method (on the
General tab) set to user-logon. In
user-logon mode, the agent automatically
connects to GlobalProtect as soon as the
user logs in to the system. This mode is
sometimes referred to as “always on,”
which is why the user must override this
behavior in order to disconnect.
By default, users in user-logon mode will
be prompted to provide a comment in
order to disconnect (
Agent User
Override
set to with-comment).
If the agent icon is not displayed,
users will not be able to disconnect.
See Step 2 for details.
• To prevent users in user-logon mode from disconnecting, select
disabled from the Agent User Override drop-down.
• To allow users to disconnect if they provide a passcode, select
with-passcode from the Agent User Override drop-down and
then enter (and confirm) the
Passcode that the end users must
supply.
• To allow users to disconnect if they provide a ticket, select
with-ticket from the Agent User Override drop-down. In this
case, the disconnect action triggers the agent to generate a Request
Number. The end user must then communicate the Request
Number to the administrator. The administrator then clicks
Generate Ticket on the Network > GlobalProtect > Portals page
and enters the Request Number from the end user to generate the
ticket. The administrator then provides the ticket to the end user,
who enters it into the Disable GlobalProtect dialog to enable the
agent to disconnect.
• To restrict how long the user may be disconnected, enter a value
(in minutes) in the
Agent User Override Timeout field. A value of
0 (the default) indicates that there is no restriction as to how long
the user may remain disconnected.
• To limit the number of times the user may disconnect, enter a value
in the
Agent User Overrides field. A value of 0 (the default)
indicates that the user disconnect is not limited.
Customize the Agent (Continued)