Test the App Installation

Use the following procedure to test the GlobalProtect app installation.
  1. Create an agent configuration for testing the app installation.
    When initially installing the GlobalProtect app software on the endpoint, the end user must be logged in to the system using an account that has administrative privileges. Subsequent app software updates do not require administrative privileges.
    As a best practice, create an agent configuration that is limited to a small group of users, such as administrators in the IT department responsible for administering the firewall:
    1. Select
      Network
      GlobalProtect
      Portals
      .
    2. Select an existing portal configuration that you want to modify or
      Add
      a new one
    3. On the
      Agent
      tab, select an existing configuration or
      Add
      a new one to deploy to the test users/group.
    4. On the
      User/User Group
      tab,
      Add
      the
      User/User Group
      who will be testing the app.
    5. On the
      App
      tab, set
      Allow User to Upgrade GlobalProtect App
      to
      Allow with Prompt
      . Click
      OK
      to save the configuration.
    6. (
      Optional
      ) On the
      Agent
      tab, select the agent configuration that you just created or modified, and then click
      Move Up
      so that it is higher on the list than the more generic configurations you have created.
      When a GlobalProtect app connects, the portal compares the source information in the packet against the agent configurations you have defined. As with security rule evaluation, the portals looks for a match starting from the top of the list. When it finds a match, it delivers the corresponding configuration to the app.
    7. Commit
      the changes.
  2. Log in to the GlobalProtect portal.
    1. Launch your web browser and go to the following URL:
      https://<portal address or name>
      For example,
      https://gp.acme.com
      .
    2. On the portal login page, enter your user
      Name
      and
      Password
      , and then click
      LOG IN
      .
      portal_login_new.png
  3. Navigate to the app download page.
    In most cases, the app download page appears immediately after you log in to the portal. Use this page to download the latest app software package.
    GP_agent_download.png
    If you have enabled GlobalProtect Clientless VPN access, the applications page opens after you log in to the portal (instead of the agent download page) when you log in to the portal. Select
    GlobalProtect Agent
    to open the download page.
    applications.png
  4. Download the app.
    1. To begin the download, click the link that corresponds to the operating system running on your computer.
      GP_agent_download.png
    2. Open the software installation file.
    3. When prompted to run or save the software, click
      Run
      .
    4. When prompted, click
      Run
      to launch the GlobalProtect Setup Wizard.
      When initially installing the GlobalProtect app software on the endpoint, the end user must be logged in to the system using an account that has administrative privileges. Subsequent app software updates do not require administrative privileges.
  5. Complete the GlobalProtect app setup.
    1. From the GlobalProtect Setup Wizard, click
      Next
      .
    2. Click
      Next
      to accept the default installation folder (
      C:\Program Files\Palo Alto Networks\GlobalProtect
      ), or click
      Browse
      to select a new location and then click
      Next
      twice.
    3. After the installation is complete,
      Close
      the wizard.
  6. Log in to GlobalProtect.
    1. Launch the GlobalProtect app by clicking the system tray icon. The status panel opens.
    2. Enter the FQDN or IP address of the portal, and then click
      Connect
      .
    3. (
      Optional
      ) By default, you are automatically connected to the
      Best Available
      gateway, based on the configuration that the administrator defines and the response times of the available gateways. To connect to a different gateway, select the gateway from the
      Gateway
      drop-down (for external gateways only).
      This option is only available if you enable manual gateway selection.
    4. (
      Optional
      ) Depending on the connection mode, click
      Connect
      to initiate the connection.
    5. (
      Optional
      ) If prompted, enter your
      Username
      and
      Password
      , and then click
      Sign In
      .
    If authentication is successful, you are connected to your corporate network, and the status panel displays the
    Connected
    or
    Connected - Internal
    status. If you set up a GlobalProtect welcome page, it displays after you log in successfully.

Related Documentation