The following topics describe how to set up and manage the Global Protect agent.
What do you want to know? See:
View more information about the GlobalProtect agent software releases. Managing the GlobalProtect Agent Software
Install the GlobalProtect agent software. Setting Up the GlobalProtect Agent
Use the GlobalProtect agent software. Using the GlobalProtect Agent
Looking for more? For detailed, step-by-step instructions on setting up the GlobalProtect client software, refer to Deploy the GlobalProtect Client Software in the GlobalProtect Administrator’s Guide .
Managing the GlobalProtect Agent Software
Select Device > GlobalProtect Client ( firewall only ) to download and activate the GlobalProtect agent software on the firewall that hosts the portal. Thereafter, endpoints that connect to the portal download the agent software. In the agent configurations you specify on the portal, you define how and when the portal pushes software to endpoints. Your configuration determines whether upgrades occur automatically when the agent connects, whether end users are prompted to upgrade, or whether upgrading is prohibited for all or a particular set of users. See Allow User to Upgrade GlobalProtect App for more details. For details on the options for distributing the GlobalProtect agent software and for step-by-step instructions for deploying the software, refer to Deploy the GlobalProtect Client Software in the GlobalProtect Administrator’s Guide .
For the initial download and installation of the GlobalProtect agent, the user of the client endpoint must be logged in with administrator rights. For subsequent upgrades, administrator rights are not required.
GlobalProtect Client Setting Description
Version This version number is of the GlobalProtect agent software that is available on the Palo Alto Networks Update Server. To see if a new agent software release is available from Palo Alto Networks, click Check Now. The firewall uses its service route to connect to the Update Server to determine if new versions are available and displays them at the top of the list.
Size The size of the agent software bundle.
Release Date The date and time Palo Alto Networks made the release available.
Downloaded A check mark in this column indicates that the corresponding version of the agent software package has been downloaded to the firewall.
Currently Activated A check mark in this column indicates that the corresponding version of the agent software has package has been activated on the firewall and can be downloaded by connecting agents. Only one version of the software can be activated at a time.
Action Indicates the current action you can take for the corresponding agent software package as follows: Download —The corresponding agent software version is available on the Palo Alto Networks Update Server. Click Download to initiate the download. If the firewall does not have access to the Internet, use an Internet-connected computer to go to the Software Update site to look for and Download new agent software versions to your local computer. Then manually Upload the agent software to the firewall. Activate —The corresponding agent software version has been downloaded to the firewall, but agents cannot yet download it. Click Activate to activate the software and enable agent upgrade. To activate a software update you manually uploaded to the firewall, click Activate From File and select the version you want to activate from the drop-down (you may need to refresh the screen for it to show as Currently Activated). Reactivate —The corresponding agent software has been activated and is ready for the client to download. Because only one version of the GlobalProtect agent software can be active on the firewall at one time, if your end users require access to a different version than is currently active, you have to Activate the other version to make it the Currently Active version.
Release Note Provides a link to the GlobalProtect release notes for the corresponding agent version.
Remove the previously downloaded agent software image from the firewall.
Setting Up the GlobalProtect Agent
The GlobalProtect agent (PanGP Agent) is an application that is installed on the client system (typically a laptop) to support GlobalProtect connections with portals and gateways and is supported by the GlobalProtect service (PanGP Service).
Be sure to choose the correct installation option for your host operating system (32-bit or 64-bit). If you are installing on a 64-bit host, use the 64-bit browser and Java combination for the initial installation.
To install the agent, open the installer file and follow the on-screen instructions.
Using the GlobalProtect Agent
The tabs in the GlobalProtect agent contain useful information about status and settings and provide information to assist in troubleshooting connection issues.
Home tab —Allows users to change the portal IP address or hostname and enter their authentication credentials. Also displays current connection status and lists any warnings or errors. Details tab —Displays information about the current connection, including portal IP addresses and protocol, and presents byte and packet statistics about the network connection. Host State tab —Displays the information stored in the HIP. Click a category on the left side of the window to display the configured information for that category on the right side of the window. Troubleshooting tab —Displays information to assist in troubleshooting. Network Configurations —Displays the current client system configuration. Routing Table —Displays information on how the GlobalProtect connection is currently routed. Sockets —Displays socket information for the current active connections. Logs —Allows the user to display logs for the GlobalProtect agent (PanGP Agent) and service (PanGP Service). Choose the log type and debugging level. Click Start to begin logging and Stop to terminate logging.

Related Documentation