Select
Device > GlobalProtect Client
(
firewall only
) to download and activate the GlobalProtect
agent software on the firewall that hosts the portal. Thereafter, endpoints that connect to the portal download the agent software. In the agent configurations you specify on the portal, you define how and when the portal pushes software to endpoints. Your configuration determines whether upgrades occur automatically when the agent connects, whether end users are prompted to upgrade, or whether upgrading is prohibited for all or a particular set of users. See
Allow User to Upgrade GlobalProtect App
for more details. For details on the options for distributing the GlobalProtect agent software and for step-by-step instructions for deploying the software, refer to
Deploy the GlobalProtect Client Software

in the
GlobalProtect Administrator’s Guide
.