The simplest way to deploy the GlobalProtect
app software is to download the new app installation package to
the firewall that is hosting your portal, and then activate the
software for download to the apps connecting to the portal. To do
this automatically, the firewall must have a service route that
enables it to access the Palo Alto Networks Update Server. If the
firewall does not have Internet access, you can download the app
software package from the Palo Alto Networks Software Updates support
site using an Internet-connected computer, and then manually upload
it to the firewall.
define how the app software updates are deployed in the portal agent
configurations—whether they occur automatically when the app connects
to the portal, whether the user is prompted to upgrade the app,
or whether the end user can manually check for and download a new
app version. For details on creating an agent configuration, see Define
the GlobalProtect Agent Configurations.
the firewall hosting the GlobalProtect portal, check for new app
to view the list of available app
If the firewall has access to the Update Server, click
for the latest updates. If the value in the
, it indicates that a new version
of the app is available.
If the firewall does not have access to the Update Server, you
must manually download the software image from the Palo Alto Networks Software Updates support
site, as described in step 2.
If the firewall has access to the Update Server, locate
the app version you want, and then click
When the download completes, the value in the
If the firewall does not have access to the Update Server,
the latest app software
image from the Palo Alto Networks Software Updates support
site. After you download the software image, go back to the
of the firewall to
Activate the app software image so that end users can
download it from the portal.
Only one version of the app software image can be
activated at a time. If you activate a new version, but have some
apps that require a previously activated version, you must activate
the required version again to enable it for download.
If the software image was automatically downloaded from the Update
If you manually uploaded the software image to the firewall,
Activate From File
, and then select
GlobalProtect Client File
from the drop-down. Click
the selected image. You may need to refresh the page before the
version displays as