If you Enforce GlobalProtect for
Network Access in a GlobalProtect portal agent configuration,
and then you upgrade a Windows endpoint to a newer version of the
GlobalProtect app, installation can fail and the enforcement configuration
can block all traffic.
This issue is caused by an OS limitation
that occurs when multiple Microsoft installer (msiexec.exe)
instances run simultaneously on a Windows endpoint. You must use
the following procedure to resolve the Microsoft installer conflict: