topic Re: GlobalProtect doesn't upgrade in GlobalProtect Discussions

GlobalProtect doesn't upgrade

ToniE — Wed, 17 Nov 2021 06:03:51 GMT

Our current version in clients is 5.2.7. Now I have activated 5.2.8 but clients doesn't upgrade. Our setting for upgrade is allow transparently. Client machines shows pop up that GlobalProtect agent upgrade is in progress please wait etc... but nothing happens.

Previous update to 5.2.7 couple of month ago went smoothly. This is first time this kind of behavior.

Re: GlobalProtect doesn't upgrade

ColeDenton — Wed, 17 Nov 2021 23:08:20 GMT

I get the same issue trying to upgrade to 5.2.8. Endpoints get a message about the upgrade in progress, but nothing ever actually happens. Are there some logs we can find to tell us what's going on?

Re: GlobalProtect doesn't upgrade

AnalysisMan — Thu, 18 Nov 2021 00:16:23 GMT

I didn't get the same issue when I activated 5.2.8 from 5.2.7. However, several users failed to upgrade the GP client, so they followed the following KB. The typical uninstallation/installation GP client didn't work in this case.

Error: Failed to find PANGP virtual adapter interface when connecting to GlobalProtect
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm5eCAC&lang=en_US

Hope this helps!

Re: GlobalProtect doesn't upgrade

TomYoung — Thu, 18 Nov 2021 00:24:19 GMT

I have macOS Catalina, and I ran into the same issue. So, it is not the issue in the KB article for Windows. Previous upgrades worked fine. For 5.2.8, I would get a popup, then nothing. I chose to download the software from the portal and manually upgrade. That process worked fine.

Re: GlobalProtect doesn't upgrade

ColeDenton — Thu, 18 Nov 2021 16:36:51 GMT

Figured out the problem for my environment. The agent download was failing (found by opening GP Agent -> Settings -> Troubleshooting -> Agent Logs)

Internal DNS records for our GP Portal were incorrect. Fixed them up so the portal was reachable from inside the network, then the upgrade immediately started working.

Re: GlobalProtect doesn't upgrade

MikeSangray2019 — Thu, 16 Nov 2023 20:26:56 GMT

Did you use the internal portal IP address for DNS? We're using a loopback address and are having a similar issue and I'm wondering if it's a misconfigured DNS entry.

Re: GlobalProtect doesn't upgrade

TomYoung — Thu, 16 Nov 2023 20:32:04 GMT

Hi @MikeSangray2019 ,

I run into a similar issue with many customers. After you connect via GP, your endpoint no longer uses an external DNS server. You need to create an internal DNS A record for your GP public IP address. Then the upgrade will work fine.

Thanks,

Tom

Re: GlobalProtect doesn't upgrade

MikeSangray2019 — Fri, 17 Nov 2023 17:47:50 GMT

Thanks, Tom! This got it working for us.

Re: GlobalProtect doesn't upgrade

caraym — Wed, 26 Mar 2025 15:05:10 GMT

This was my issue as well, thank you Tom!