Release Cadence for GlobalProtect Cloud Service

The following table describes how GlobalProtect cloud service updates its infrastructure components, including content updates, software updates, and plugin updates. The table also notes whether GlobalProtect cloud service automatically updates the software and how to apply infrastructure updates if they are not automatic.
ComponentUpdate ScheduleCloud Controlled? (Yes/No)Comments
GlobalProtect app
  • Major GlobalProtect App Releases (for example, x.0 or 4.x)—GlobalProtect cloud service updates the agent on the portal with the latest major release 7-10 days after the general availability of the x.0.1 version of that release.
    For example, given an agent release of 4.0, GlobalProtect cloud service updates the agent on the portal 7-10 days after the release of 4.0.1.
  • Minor GlobalProtect App Releases (for example, 4.1.x)—GlobalProtect cloud service updates the agent on the portal with the latest minor release 7-10 days after the general availability of that release.
YesThe cloud controls the version of the app that is available for upgrade; you control how and when to roll out the update to the end users. See Manage Upgrade Options for the GlobalProtect App for details.
Plugin version
Available after the plugin release.
NoYou perform the tasks to upgrade the plugin.See Upgrade the Cloud Services Plugin to upgrade the plugin in the Panorama appliance.
PAN-OS software upgrades in GlobalProtect cloud service infrastructure—scheduled
We upgrade the PAN-OS infrastructure at the same time we release a new version of GlobalProtect cloud service. We provide you with 7 days’ notice before a scheduled upgrade.
YesRegister for email or text notifications for infrastructure upgrades at the https://status.paloaltonetworks.com/ website.
PAN-OS upgrades in GlobalProtect cloud service infrastructure—unscheduled
For unscheduled upgrades (for example, an emergency hotfix for zero-day threats), we make every effort to give you 48 hours’ notice before an upgrade; however, GlobalProtect cloud service must occasionally upgrade its infrastructure with a shorter notice time.
YesRegister for email or text notifications for infrastructure upgrades at the https://status.paloaltonetworks.com/ website.
Panorama version to use with the GlobalProtect cloud service pluginNoneNoSee Upgrade the Cloud Services Plugin for the supported Panorama versions to use with GlobalProtect cloud service. To upgrade your Panorama to a new version, see Install Content and Software Updates for Panorama.
Applications and threat updates
Daily with a threshold of 24 hours.
We release New App-IDs on the third Tuesday of every month. Plan to review and incorporate these new App-IDs within the 24 hour threshold. Use the New App-ID filter to minimize this possible traffic impact.
Yes
We will provide an update via the status.paloaltonetworks.com page 48 hours prior to a cloud upgrade, and 24 hours prior to release of new App-ID version.
Antivirus protection
Every hour, 10 minutes after the hour
YesGlobalProtect cloud service is always up-to-date with the latest Antivirus release.
WildFire
Every 15 minutes
YesGlobalProtect cloud service is always up-to-date with the latest WildFire release.
GlobalProtect Data File
Every hour
YesGlobalProtect cloud service is always up-to-date with the latest GlobalProtect data file release.
Clientless VPN application signatures
Every hour
YesGlobalProtect cloud service is always up-to-date with the latest Clientless VPN application signature release.

Related Documentation