topic Re: GP 5.2.4 upgrade in GlobalProtect Discussions

GP 5.2.4 upgrade

Netman584 — Mon, 08 Mar 2021 09:11:59 GMT

Dears,

I am planning to upgrade the Globalprotect version from 5.1.7 to 5.2.4. Do I need to push or reinstall SSL / TLS certificate when I am upgrading to GP 5.2.4 ?

Also I am planning to push the GP software (*.msi files) from an SCCM server. May I know is this the best method. And any best practices available while pushing the GP client from SCCM?

Thanks,

Shah

Re: GP 5.2.4 upgrade

Mick_Ball — Mon, 08 Mar 2021 13:38:30 GMT

the only issue I have experienced from SCCM is that when it is initiated by the user, they get the installation complete message before the service has installed and restarted, if they log off or shut down too soon after the pop up then it will cause some issues as not installed correctly.

I have started moving towards the App option of "Allow Transparently" as seems a lot smoother and less grief but that may be down to my SCCM setup. (not managed by me).

Re: GP 5.2.4 upgrade

Netman584 — Mon, 08 Mar 2021 15:38:47 GMT

@Mick_Ball , thank you.

For transparent installation, i believe the latest version should be available on the firewall. I am planning to test it on couple of machines first. Once all working fine, I will proceed to upgrade on firewall, then the clients. I hope there won't be any certificate issue after upgrading to 5.2.4.

Re: GP 5.2.4 upgrade

Mick_Ball — Mon, 08 Mar 2021 15:42:16 GMT

sounds like a plan, i have never had cert issues and have been upgrading for a few years since 3.x.

Re: GP 5.2.4 upgrade

Netman584 — Mon, 08 Mar 2021 15:45:39 GMT

@Mick_Ball, thank you for sharing your experience. Let me try..:-)

Re: GP 5.2.4 upgrade

sebastianvd — Tue, 09 Mar 2021 13:35:11 GMT

We've been using both, first deployment is done by using intune.

Then I set update to transparent and for upgrading you need to activate a specific GP version at the firewall.

Sometimes I create a specific duplicate configuration in the Portal for some users to test and have them only upgrade while i have the bulk set to not upgrade.

After a while we upgrade the intune version to the recent version used so new workstations do not fall too far behind.

Re: GP 5.2.4 upgrade

sebastianvd — Fri, 26 Mar 2021 08:48:23 GMT

A new hotfix has been released containing lots of fixes touching our issues:

A hotfix for 5.2.5 has been released with a lot of fixes btw: Addressed Issues in GlobalProtect App 5.2 (paloaltonetworks.com)