Focus

Select the Active GlobalProtect App Version for Prisma Access

Table of Contents

Filter

Expand All | Collapse All

Prisma Access Docs

Activation & Onboarding
Administration
Version
- Prisma Access China
- 4.0 & Later
- 3.2 Preferred and Innovation
- 3.1 Preferred and Innovation
- 3.0 Preferred and Innovation
- 2.2 Preferred
Integrations
Incidents & Alerts
Release Notes
Version
- 5.2 Preferred and Innovation
- 5.1 Preferred and Innovation
- 5.0 Preferred and Innovation
- 4.2 Preferred
- 4.1 Preferred
- 4.0 Preferred
- 3.2 Preferred and Innovation
- 3.1 Preferred and Innovation
- 3.0 Preferred and Innovation
- 2.2 Preferred

Manage GlobalProtect App Upgrades in Prisma Access

Manage User Access to GlobalProtect App Updates from Prisma Access

Select the Active GlobalProtect App Version for Prisma Access

How to select the active GlobalProtect app version in Prisma Access.

Prisma Access manages the GlobalProtect app version for Windows and macOS users in your organization. While Prisma Access hosts several GlobalProtect app versions, only one of the hosted versions is active. When mobile users log in to the Prisma Access portal, the active version is the one that is available for mobile users to download and install on their Windows and macOS devices.

If your currently-active version is end-of-life, Prisma Access notifies you and requests that you activate a supported version.

You can select multiple GlobalProtect versions in a multitenant deployment. The GlobalProtect app version settings you apply are per tenant and not global; you control the app version on a per-tenant basis.

You can replace the current active version with another hosted version from the Service Setup page by completing the following steps.

If you are using Prisma Access in a FedRAMP environment, you must use the FIPS-certified version of GlobalProtect, which is version of 5.1.4. If you change the default GlobalProtect version from 5.1.4, you cannot select version 5.1.4 from the Panorama UI and must open a Support case with Palo Alto Networks Technical Support to add it back.

Select PanoramaCloud ServicesConfigurationService Setup.
Select Activate new GlobalProtect App version.
The active version is indicated in the drop-down list.

If your current GlobalProtect version is end-of-life (EoL), a message displays in this area on the Service Setup page; if you receive this message, upgrade your GlobalProtect app version by continuing to the next step.
Select the version to which you want to upgrade and click OK.
A window displays to verify your choice.

After the app has been activated, you receive a success message.
View the System Status page to verify the Active GlobalProtect App version.