Device > GlobalProtect Client
) to download and activate the GlobalProtect
agent software on the firewall that hosts the portal. Thereafter, endpoints that connect to the portal download the agent software. In the agent configurations you specify on the portal, you define how and when the portal pushes software to endpoints. Your configuration determines whether upgrades occur automatically when the agent connects, whether end users are prompted to upgrade, or whether upgrading is prohibited for all or a particular set of users. See
Allow User to Upgrade GlobalProtect App for more details. For details on the options for distributing the GlobalProtect agent software and for step-by-step instructions for deploying the software, refer to Deploy the GlobalProtect Client Software
GlobalProtect Administrator’s Guide
For the initial download and installation of the GlobalProtect agent, the user of the client endpoint must be logged in with administrator rights. For subsequent upgrades, administrator rights are not required.
GlobalProtect Client Setting
This version number is of the GlobalProtect agent software that is available on the Palo Alto Networks Update Server. To see if a new agent software release is available from Palo Alto Networks, click
Check Now. The firewall uses its service route to connect to the Update Server to determine if new versions are available and displays them at the top of the list.
The size of the agent software bundle.
The date and time Palo Alto Networks made the release available.
A check mark in this column indicates that the corresponding version of the agent software package has been downloaded to the firewall.
A check mark in this column indicates that the corresponding version of the agent software has package has been activated on the firewall and can be downloaded by connecting agents. Only one version of the software can be activated at a time.
Indicates the current action you can take for the corresponding agent software package as follows:
—The corresponding agent software version is available on the Palo Alto Networks Update Server. Click
to initiate the download. If the firewall does not have access to the Internet, use an Internet-connected computer to go to the Software Update
site to look for and
new agent software versions to your local computer. Then manually
the agent software to the firewall.
—The corresponding agent software version has been downloaded to the firewall, but agents cannot yet download it. Click
to activate the software and enable agent upgrade. To activate a software update you manually uploaded to the firewall, click
Activate From File
and select the version you want to activate from the drop-down (you may need to refresh the screen for it to show as
—The corresponding agent software has been activated and is ready for the client to download. Because only one version of the GlobalProtect agent software can be active on the firewall at one time, if your end users require access to a different version than is currently active, you have to
the other version to make it the
Provides a link to the GlobalProtect release notes for the corresponding agent version.
Remove the previously downloaded agent software image from the firewall.
Setting Up the GlobalProtect Agent
The GlobalProtect agent (PanGP Agent) is an application
that is installed on the client system (typically a laptop) to support GlobalProtect connections with portals and gateways and is supported by the GlobalProtect service (PanGP Service).
Be sure to choose the correct installation option for your host operating system (32-bit or 64-bit). If you are installing on a 64-bit host, use the 64-bit browser and Java combination for the initial installation.
To install the agent, open the installer file and follow the on-screen instructions.
Using the GlobalProtect Agent
The tabs in the GlobalProtect agent
contain useful information about status and settings and provide information to assist in troubleshooting connection issues.
—Allows users to change the portal IP address or hostname and enter their authentication credentials. Also displays current connection status and lists any warnings or errors.
—Displays information about the current connection, including portal IP addresses and protocol, and presents byte and packet statistics about the network connection.
Host State tab
—Displays the information stored in the HIP. Click a category on the left side of the window to display the configured information for that category on the right side of the window.
—Displays information to assist in troubleshooting.
—Displays the current client system configuration.
—Displays information on how the GlobalProtect connection is currently routed.
—Displays socket information for the current active connections.
—Allows the user to display logs for the GlobalProtect agent (PanGP Agent) and service (PanGP Service). Choose the log type and debugging level. Click
to begin logging and
to terminate logging.