If a large number of your endpoints must install
and/or update the GlobalProtect app software, consider hosting the
GlobalProtect app software images on an external web server. This
helps reduce the load on the firewall when users connect to and
download the app.
Download and activate the version of the GlobalProtect app
that you plan to host on the web server to the firewall.
Follow the steps for downloading and activating the app
software on the firewall, as described in Host
App Updates on the Portal.
Download the GlobalProtect app software image that you
want to host on your web server.
Download the same image that you activated on the portal.
From
a web browser, go to the Palo Alto Networks Software Updates site,
and then
Download
the file to your computer.
Publish the software image files to your web server.
Redirect end users to the web server.
On the firewall hosting the portal, enter the following
CLI commands in operational mode:
>
set global-protect redirect on
>
set global-protect redirect location
<path>
where
<path>
is
the path is the URL to the folder hosting the image (for example,
https://acme/GP
).
Test the redirect.
From a web browser, go to the following URL:
https://<portal address or name>
For
example,
https://gp.acme.com
.
On the portal login page, enter your user
Name
and
Password
,
and then click
LOGIN
. After successful login,
the portal should redirect you to the download.
