Host Agent Updates on a Web Server
If you have a large number of endpoints that will need to install and/or update the GlobalProtect agent software, consider hosting the GlobalProtect agent software images on an external web server. This helps reduce the load on the firewall when users connect to download the agent. To use this feature, the firewall hosting the portal must be running PAN-OS 4.1.7 or a later release.
- Download the version of the GlobalProtect agent
that you plan to host on the web server to the firewall and activate
it.Follow the steps for downloading and activating the agent software on the firewall as described in Host Agent Updates on the Portal.
- Download the GlobalProtect agent image you want to host
on your web server.You should download the same image that you activated on the portal.From a browser, go to the Palo Alto Networks Software Updates site and Download the file to your computer.
- Publish the files to your web server.Upload the image file(s) to your web server.
- Redirect the end users to the web server.On the firewall hosting the portal, log in to the CLI and enter the following operational mode commands:
> set global-protect redirect on > set global-protect redirect location <path>Code copied to clipboardUnable to copy due to lack of browser support.where <path> is the path is the URL to the folder hosting the image, for example https://example/GP.
- Test the redirect.
- Launch your web browser and go to the URL
of the portal address or hostname:For example, https://gp.example.com.
- On the portal login page, enter your user Name and Password and then click Login. After successful login, the portal should redirect you to the download.
- Launch your web browser and go to the URL of the portal address or hostname:
Host Agent Updates on the Portal
Host Agent Updates on the Portal The simplest way to deploy the GlobalProtect agent software is to download the new agent installation package to the ...
Deploy the GlobalProtect Agent Software
Deploy the GlobalProtect Agent Software There are several ways to deploy the GlobalProtect agent software: Directly from the portal —Download the agent software to the ...
Device > GlobalProtect Client
Device > GlobalProtect Client The following topics describe how to set up and manage the Global Protect agent. What do you want to know? See: ...
Deploy the GlobalProtect Client Software
Deploy the GlobalProtect Client Software In order to connect to GlobalProtect, an end host must be running GlobalProtect client software. The software deployment method depends ...
GlobalProtect Multiple Gateway Configuration
GlobalProtect Multiple Gateway Configuration In GlobalProtect Multiple Gateway Topology , a second external gateway has been added to the configuration. Multiple gateways are supported in ...
Deploy an Update to Firewalls when Panorama is not Internet-connected
Deploy an Update to Firewalls when Panorama is not Internet-connected For a list of software and content updates you can install on firewalls, see Supported ...
Mixed Internal and External Gateway Configuration
Mixed Internal and External Gateway Configuration In a GlobalProtect mixed internal and external gateway configuration, you configure separate gateways for VPN access and for access ...
Install Content and Software Updates for Panorama
Install Content and Software Updates for Panorama A valid support subscription enables access to the Panorama software image and release notes. To take advantage of ...
Install the VM-Series Firewall in a Basic Gateway Deployment
Install the VM-Series Firewall in a Basic Gateway Deployment Complete the following steps to prepare the heat templates, bootstrap files, and software images needed to ...