|
•
|
Select the Authentication tab to configure the authentication settings that apply to the agent configuration.
|
(Optional) Select the source that distributes the client certificate to an endpoint, which then presents the certificate to the gateways. A client certificate is required if you are configuring mutual SSL authentication.
To use a certificate that is Local to the firewall instead of a generated certificate from the PKI through SCEP, select a certificate that is already uploaded to the firewall.
If you use an internal CA to distribute certificates to endpoints, select None (default). When you select None, the portal does not push a certificate to the endpoint.
|
|
|
Select Yes to save the username and password on the app or select No to force the users to provide the password—either transparently via the endpoint or by manually entering one—each time they connect. Select Save Username Only to save only the username each time a user connects. Select Only with User Fingerprint to allow biometric sign-in. When biometric sign-on is enabled on an endpoint, GlobalProtect uses the saved user credentials when a finger-print scan matches a trusted finger-print template on the endpoint.
|
|
