Focus

PAN-OS Web Interface Help

Managing the GlobalProtect App Software

Table of Contents

Managing the GlobalProtect App Software

Select DeviceGlobalProtect Client (firewall only) to download and activate the GlobalProtect app software on the firewall that hosts the portal. Thereafter, endpoints that connect to the portal download the app software. In the agent configurations you specify on the portal, you define how and when the portal pushes software to endpoints. Your configuration determines whether upgrades occur automatically when the app connects, whether end users are prompted to upgrade, or whether upgrading is prohibited for all or a particular set of users. See Allow User to Upgrade GlobalProtect App for more details. For details on the options for distributing the GlobalProtect app software and for step-by-step instructions for deploying the software, refer to Deploy the GlobalProtect App Software in the GlobalProtect Administrator’s Guide.

For the initial download and installation of the GlobalProtect app, the user of the endpoint must be logged in with administrator rights. For subsequent upgrades, administrator rights are not required.

GlobalProtect Client Settings	Description
Version	This version number is of the GlobalProtect app software that is available on the Palo Alto Networks Update Server. To see if a new app software release is available from Palo Alto Networks, click Check Now. The firewall uses its service route to connect to the Update Server to determine if new versions are available and displays them at the top of the list.
Size	The size of the app software bundle.
Release Date	The date and time Palo Alto Networks made the release available.
Downloaded	A check mark in this column indicates that the corresponding version of the app software package has been downloaded to the firewall.
Currently Activated	A check mark in this column indicates that the corresponding version of the app software has package has been activated on the firewall and can be downloaded by connecting apps. Only one version of the software can be activated at a time.
Action	Indicates the current action you can take for the corresponding app software package as follows: Download—The corresponding app software version is available on the Palo Alto Networks Update Server. Click Download to initiate the download. If the firewall does not have access to the Internet, use an Internet-connected computer to go to the Customer Support site, and then select Updates Software Updates to look for and Download new app software versions to your local computer. Then manually Upload the app software to the firewall. Activate—The corresponding app software version has been downloaded to the firewall, but apps cannot yet download it. Click Activate to activate the software and enable app upgrade. To activate a software update you manually uploaded to the firewall, click Activate From File and select the version you want to activate from the drop-down (you may need to refresh the screen for it to show as Currently Activated). Reactivate—The corresponding app software has been activated and is ready for the endpoint to download. Because only one version of the GlobalProtect app software can be active on the firewall at one time, if your end users require access to a different version than is currently active, you have to Activate the other version to make it the Currently Active version.
Release Note	Provides a link to the GlobalProtect release notes for the corresponding app version.
	Remove the previously downloaded app software image from the firewall.

Device > GlobalProtect Client

Setting Up the GlobalProtect App