Perform Staged Updates of the GlobalProtect App on Prisma Access
How to deploy different GlobalProtect versions in a Prisma
Access deployment.
If you manage a large organization, you might
want to update mobile users to the latest version of the GlobalProtect
app in stages. For example, you could assign a smaller group to
update their GlobalProtect app before rolling out the update to
everybody in your organization. To do so, complete the following
task.
If
you have not yet created it, create a user group for the first group
of users to which you want to roll out the GlobalProtect app update.
prompts users
when a new version is activated and allows them to upgrade their
software when it is convenient;
Allow Transparently
automatically
upgrades the app software whenever a new version becomes available
on the portal.
Click
OK
to save your changes.
Select
Move Up
to move your configuration
above the default configuration.
When an app connects, the portal compares the source information
in the packet against the agent configurations you have defined.
As with security rule evaluation, the portal looks for a match starting
from the top of the list. When it finds a match, it delivers the
corresponding configuration to the app.
Repeat these steps for the
DEFAULT
configuration,
but change
Allow User to Upgrade GlobalProtect App
to
Disallow
to
prevent users from updating to the latest GlobalProtect app software.
When you want to let the rest of the users update their
apps, change
Allow User to Upgrade GlobalProtect App
in
the
DEFAULT
configuration to a selection
that allows it (either