The simplest way to deploy the GlobalProtect
app software is to download the new app installation package to
the firewall that is hosting your portal, and then activate the software
for download to the apps connecting to the portal. To do this automatically,
the firewall must have a service route that enables it to access
the Palo Alto Networks Update Server. If the firewall does not have
internet access, you can
Download the GlobalProtect App Software Package for Hosting on the Portal software package
from the Palo Alto Networks
Software Updates support
site using an internet-connected computer, and then manually upload
it to the firewall.