Managing the GlobalProtect Agent Software

Select
Device
GlobalProtect Client
(
firewall only
) to download and activate the GlobalProtect agent software on the firewall that hosts the portal. Thereafter, endpoints that connect to the portal download the agent software. In the agent configurations you specify on the portal, you define how and when the portal pushes software to endpoints. Your configuration determines whether upgrades occur automatically when the agent connects, whether end users are prompted to upgrade, or whether upgrading is prohibited for all or a particular set of users. See Allow User to Upgrade GlobalProtect App for more details. For details on the options for distributing the GlobalProtect agent software and for step-by-step instructions for deploying the software, refer to Deploy the GlobalProtect Client Software in the GlobalProtect Administrator’s Guide.
For the initial download and installation of the GlobalProtect agent, the user of the client endpoint must be logged in with administrator rights. For subsequent upgrades, administrator rights are not required.
GlobalProtect Client Settings
Description
Version
This version number is of the GlobalProtect agent software that is available on the Palo Alto Networks Update Server. To see if a new agent software release is available from Palo Alto Networks, click
Check Now
. The firewall uses its service route to connect to the Update Server to determine if new versions are available and displays them at the top of the list.
Size
The size of the agent software bundle.
Release Date
The date and time Palo Alto Networks made the release available.
Downloaded
A check mark in this column indicates that the corresponding version of the agent software package has been downloaded to the firewall.
Currently Activated
A check mark in this column indicates that the corresponding version of the agent software has package has been activated on the firewall and can be downloaded by connecting agents. Only one version of the software can be activated at a time.
Action
Indicates the current action you can take for the corresponding agent software package as follows:
  • Download
    —The corresponding agent software version is available on the Palo Alto Networks Update Server. Click
    Download
    to initiate the download. If the firewall does not have access to the Internet, use an Internet-connected computer to go to the Software Update site to look for and
    Download
    new agent software versions to your local computer. Then manually
    Upload
    the agent software to the firewall.
  • Activate
    —The corresponding agent software version has been downloaded to the firewall, but agents cannot yet download it. Click
    Activate
    to activate the software and enable agent upgrade. To activate a software update you manually uploaded to the firewall, click
    Activate From File
    and select the version you want to activate from the drop-down (you may need to refresh the screen for it to show as
    Currently Activated
    ).
  • Reactivate
    —The corresponding agent software has been activated and is ready for the client to download. Because only one version of the GlobalProtect agent software can be active on the firewall at one time, if your end users require access to a different version than is currently active, you have to
    Activate
    the other version to make it the
    Currently Active
    version.
Release Note
Provides a link to the GlobalProtect release notes for the corresponding agent version.
delete_agent.png
Remove the previously downloaded agent software image from the firewall.

Related Documentation