bSecure GlobalProtect Connect before Login

The GlobalProtect VPN software (bSecure Remote Access Service) supports connecting to the Campus VPN service before logging into Windows. This allows access to Campus resources during the login process instead of waiting until after you log in to start the GlobalProtect connection.

Note: To use this feature you must be running GlobalProtect v5.2.10 or newer on a Windows 10 or newer computer.

Warning: To configure connect before login administrators have to modify system registry, this should not be performed by someone unfamiliar with the Windows registry system.

This configuration can be included in installation images so it is available to users as soon as a PC is built.

Configuring GlobalProtect for Connect before Login

1. Follow the standard instructions for installing GlobalProtect onto your Windows computer
2. Run the following three commands in an Administrator elevated command prompt (right click on command icon and choose "Run as Administrator")

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect\CBL" /v AlwaysShowPortal /t REG_SZ /d YES /F

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect\CBL" /v TrustedIdpDomains /t REG_SZ /d duosecurity.com,berkeley.edu /F

"%ProgramFiles%\Palo Alto Networks\GlobalProtect\PanGPS.exe" -registerplap

3. Reboot your computer
4. When you system returns to the Windows login screen there will be a new icon in the lower right hand of the login window that looks like two overlapping computers
              
5. Click on the Network Sign-in con to launch GlobalProtect and log in as you normally would
   1. Note that TAB does not work when logging into GlobalProtect/CalNet and you must manually select the username, password, and login buttons with your mouse. 
6. After the VPN login process is complete you can log into Windows