topic Re: Incorrect GlobalProtect Version reported in GlobalProtect Monitor in GlobalProtect Discussions

Incorrect GlobalProtect Version reported in GlobalProtect Monitor

AstonMartinF1 — Thu, 20 Jan 2022 17:02:08 GMT

When looking at the globalprotect logs within the monitor tab on my PA-3220 running 10.1.3 some clients are reporting the incorrect GP version. I have lots listed as running version 5.1.0. We currently don't have any workstations running that version.

I get the same if I run a custom report.

Any ideas why the incorrect version is being reported?

I don't have a globalprotect gateway license so not using HIP.

Re: Incorrect GlobalProtect Version reported in GlobalProtect Monitor

nikoolayy1 — Tue, 25 Jan 2022 15:51:58 GMT

Maybe first remove globalprotect and all its files and then install again the new version as maybe some old files have remained as we had similar issue even after deleting and installing globalprotect as the normal delete did not remove all the files:

Uninstall the GlobalProtect App for Windows (paloaltonetworks.com)

GlobalProtect Error During Installation: An instance of GlobalProtect is already present on the system."" (paloaltonetworks.com)

Re: Incorrect GlobalProtect Version reported in GlobalProtect Monitor

AstonMartinF1 — Tue, 25 Jan 2022 15:54:51 GMT

I have since found a registry setting we were pushing out which was setting the version number. On removing the registry globalprotect would no longer connect. Repair of GP fixed the issue. Need to work out a plan to change this for all other workstations with out too much disruption.

Re: Incorrect GlobalProtect Version reported in GlobalProtect Monitor

nikoolayy1 — Tue, 25 Jan 2022 16:14:41 GMT

Maybe see active directory GPIO to change reg keys or other device management system like intune, jamf pro for MAC or maybe for the globalprotect to start script.

Deploy Scripts Using the Windows Registry (paloaltonetworks.com)

Re: Incorrect GlobalProtect Version reported in GlobalProtect Monitor

nikoolayy1 — Tue, 25 Jan 2022 16:23:14 GMT

I forgot to add that I have used powershell scripts to play with the windows reg keys (no need to accept this comment as a solution):

How to Get, Edit, Create and Delete Registry Keys with PowerShell (netwrix.com)

Hope it help.