The GlobalProtect VPN software (bSecure Remote Access Service) supports connecting to the Campus VPN service before logging into Windows. This allows access to Campus resources during the login process instead of waiting until after you log in to start the GlobalProtect connection.
Note: To use this feature you must be running GlobalProtect v5.2.10 or newer on a Windows 10 or newer computer.
Warning: To configure connect before login administrators have to modify system registry, this should not be performed by someone unfamiliar with the Windows registry system.
This configuration can be included in installation images so it is available to users as soon as a PC is built.
Configuring GlobalProtect for Connect before Login
- Follow the standard instructions for installing GlobalProtect onto your Windows computer
- Run the following three commands from the CLI
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect\CBL" /v AlwaysShowPortal /t REG_SZ /d YES /F
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect\CBL" /v TrustedIdpDomains /t REG_SZ /d duosecurity.com,berkeley.edu /F
"%ProgramFiles%\Palo Alto Networks\GlobalProtect\PanGPS.exe" -registerplap
- Reboot your computer
- When you system returns to the Windows login screen there will be a new icon in the lower right hand of the login window that looks like two overlapping computers
- Click on the icon to launch GlobalProtect and log in as you normally would
- After the VPN login process is complete you can log into Windows