When you navigate to Network > GlobalProtect > Portals > Agent > (config) > App and look in the Connect Method section, which three options are available? (Choose three.)

Question

Options

• Auser-logon (always on)
• Bpre-logon then on-demand
• Con-demand (manual user initiated connection)
• Dpost-logon (always on)
• Ecertificate-logon

• A
  92% (22)
• D
  4% (1)
• E
  4% (1)

Explanation

In the GlobalProtect Portal Agent configuration under Network > GlobalProtect > Portals > Agent > (config) > App > Connect Method, there are exactly three connect method options available: (A) user-logon (always on) - the GlobalProtect client connects automatically when the user logs into the endpoint OS; (B) pre-logon then on-demand - the tunnel is established before user login using machine certificates, then switches to on-demand mode after login; and (C) on-demand (manual user initiated connection) - the user must manually launch and connect the GlobalProtect client. Option D ('post-logon always on') is not a valid connect method option in PAN-OS GlobalProtect. Option E ('certificate-logon') is not a valid connect method option either; certificates are used as an authentication mechanism but are not a named connect method.

No community discussion yet for this question.