If you have a large number of endpoints that
will need to install and/or update the GlobalProtect agent software,
consider hosting the GlobalProtect agent software images on an external
web server. This helps reduce the load on the firewall when users
connect to download the agent. To use this feature, the firewall
hosting the portal must be running PAN-OS 4.1.7 or a later release.
Download the version of the GlobalProtect agent
that you plan to host on the web server to the firewall and activate
it.
Follow the steps for downloading and activating the agent
software on the firewall as described in Host
Agent Updates on the Portal.
Download the GlobalProtect agent image you want to host
on your web server.
You should download the same image that you activated on
the portal.
From a browser, go to the Palo Alto Networks Software Updates site
and
Download
the file to your computer.
Publish the files to your web server.
Upload the image file(s) to your web server.
Redirect the end users to the web server.
On the firewall hosting the portal, log in to the CLI and
enter the following operational mode commands:
>
set global-protect redirect on
>
set global-protect redirect location
<path>
where
<path>
is
the path is the URL to the folder hosting the image, for example
https://acme/GP
.
Test the redirect.
Launch your web browser and go to the following
URL:
https://<portal address or name>
For
example,
https://gp.acme.com
.
On the portal login page, enter your user
Name
and
Password
and
then click
Login
. After successful login,
the portal should redirect you to the download.
