If you have a large number of endpoints that
will need to install and/or update the GlobalProtect agent software,
consider hosting the GlobalProtect agent software images on an external
web server. This helps reduce the load on the firewall when users
connect to download the agent. To use this feature, the firewall
hosting the portal must be running PAN-OS 4.1.7 or a later release.
Download the version of the GlobalProtect agent
that you plan to host on the web server to the firewall and activate