Test the Agent Installation

Use the following procedure to test the agent installation.
  1. Create an agent configuration for testing the agent installation.
    When initially installing the GlobalProtect agent software on the endpoint, the end user must be logged in to the system using an account that has administrative privileges. Subsequent agent software updates do not require administrative privileges.
    As a best practice, create an agent configuration that is limited to a small group of users, such as administrators in the IT department responsible for administering the firewall:
    1. Select NetworkGlobalProtectPortals and select the portal configuration to edit.
    2. Select the Agent tab and either select an existing configuration or Add a new configuration to deploy to the test users/group.
    3. On the User/User Group tab, click Add in the User/User Group section, select the user or group who will be testing the agent, and then click OK.
    4. On the Agent tab, make sure Agent Upgrade is set to prompt and then click OK to save the configuration.
    5. (Optional) Select the agent configuration you just created/modified and click Move Up so that it is before any more generic configurations you have created.
    6. Commit the changes.
  2. Log in to the GlobalProtect portal.
    1. Launch your web browser and go to the following URL:
      https://<portal address or name>
      For example, https://gp.acme.com.
    2. On the portal login page, enter your user Name and Password and then click Login.
      portal_login_new.png
  3. Navigate to the agent download page.
    In most cases, you will see an agent download page when you log in to the portal. Use this page to download the latest agent software package.
    GP_agent_download.png
    If you have enabled GlobalProtect Clientless VPN access, you will see an applications page (instead of the agent download page) when you log in to the portal. Select GlobalProtect Agent to open the download page.
    applications.png
  4. Download the agent.
    1. Click the link that corresponds to the operating system you are running on your computer to begin the download.
      GP_agent_download.png
    2. When prompted to run or save the software, click Run.
    3. When prompted, click Run to launch the GlobalProtect Setup Wizard.
      When initially installing the GlobalProtect agent software on the endpoint, the end user must be logged in to the system using an account that has administrative privileges. Subsequent agent software updates do not require administrative privileges.
  5. Complete the GlobalProtect agent setup.
    1. From the GlobalProtect Setup Wizard, click Next.
    2. Click Next to accept the default installation folder
      (C:\Program Files\Palo Alto Networks\GlobalProtect) or Browse to choose a new location and then click Next twice.
    3. After the installation successfully completes, click Close. The GlobalProtect agent will automatically start.
  6. Log in to GlobalProtect.
    Enter the FQDN or IP address of the Portal and Connect. If prompted, enter your Username and Password and Connect. If authentication is successful, the agent will connect to GlobalProtect. Use the agent to access resources on the corporate network as well as external resources, as defined in the corresponding security polices.
    need_credentials.png
    To deploy the agent to end users, create agent configurations for the user groups for which you want to enable access and set the Agent Upgrade settings appropriately and then communicate the portal address. See Define the GlobalProtect Agent Configurations for details on setting up agent configurations.

Related Documentation