The simplest way to deploy the GlobalProtect
agent software is to download the new agent installation package
to the firewall that is hosting your portal and then activate the
software for download to the agents connecting to the portal. To
do this automatically, the firewall must have a service route that
enables it to access the Palo Alto Networks Update Server. If the
firewall does not have access to the Internet, you can manually
download the agent software package from the Palo Alto Networks Software Updates support
site using an Internet-connected computer and then manually upload
it to the firewall.
define how the agent software updates are deployed in the agent
configurations you define on the portal—whether they happen automatically
when the agent connects to the portal, whether the user is prompted
to upgrade the agent, or whether the end user can manually check
for and download a new agent version. For details on creating an
agent configuration, see Define
the GlobalProtect Agent Configurations.
Launch the web interface on the firewall hosting
the GlobalProtect portal and go to the GlobalProtect Client page.
new agent software images.
If the firewall has access to the Update Server, click
to check for the latest updates. If the value in
indicates that an update is available.
If the firewall does not have access to the Update Server, go
to the Palo Alto Networks Software Updates support
the file to your computer.
Then go back to the firewall to manually
If your firewall does not have internet access from
the management port, you can download the agent update from the
Palo Alto Networks Support Site.
You can then
the update to your firewall
and then activate
Activate From File
the agent version you want and then click
When the download completes, the value in the
If you manually
uploaded the agent software as detailed in 2,
column will not update. Continue
to the next step for instructions on activating an image that was
Activate the agent software image so that end users can
download it from the portal.
Only one version of agent software image can be activated
at a time. If you activate a new version, but have some agents that
require a previously activated version, you will have to activate
the required version again to enable it for download.
If you downloaded the image automatically from the Update Server,
If you manually uploaded the image to the firewall, click
and then select the
you uploaded from the drop-down. Click
activate the selected image. You may need to refresh the screen
before the version displays as