topic Re: Compatibility Global Protect Client - 4.1.11 and Pan OS 9.1 in GlobalProtect Discussions

Compatibility Global Protect Client - 4.1.11 and Pan OS 9.1

mehul2609 — Wed, 16 Feb 2022 03:09:02 GMT

Hi All,

We are planning to upgrade our Pan OS from 8.1.21 to 9.1.x.

Some of our Global Protect clients - still on very old version - which is 4.1.11. We are in process to upgrade them to latest 5.2.x.

My query is - Once we upgrade our pan OS to 9.1 and if we miss out few clients on old version - will 9.1.x allow them to download and update their 4.1.11 version to 5.2.x ?? Or connectivity won't allow at all between 4.1.11 and 9.1.x

Regards,

Mehul.

Re: Compatibility Global Protect Client - 4.1.11 and Pan OS 9.1

jdelio — Wed, 16 Feb 2022 18:34:09 GMT

I think that those older clients should still be able to connect. Just not have the same features.

Worst case, they should be able to access the portal page, login and then download the newer client there.

What does everyone else think?

Re: Compatibility Global Protect Client - 4.1.11 and Pan OS 9.1

alowther_chatham — Tue, 22 Feb 2022 16:06:17 GMT

I would upgrade the GlobalProtect clients first. Some functionality may work, but the documentation for PanOS 9.1 says that the "Minimum Compatible Version with PAN-OS 9.1" is GlobalProtect 5.1

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-release-notes/pan-os-9-1-release-information/associated-software-and-content-versions.html

Re: Compatibility Global Protect Client - 4.1.11 and Pan OS 9.1

mehul2609 — Sun, 27 Feb 2022 22:05:09 GMT

We have successfully upgraded to 9.1.13 and its allowing old GP clients on 4.1.11 to connect..