topic Re: Force GP client upgrade in GlobalProtect Discussions

Force GP client upgrade

ce1028 — Sat, 07 Nov 2020 17:53:18 GMT

Hi,

Is there a way to force a client to upgrade their globalprotect version? I have set the update to transparent and this works when users boot up their computers and connect. The issue comes from users that remain connected and don't disconnect. Disconnecting their gateway session does not force the upgrade.

I use always on vpn setting.

Re: Force GP client upgrade

MP18 — Sun, 08 Nov 2020 17:29:45 GMT

Only other way is to push the software via SCCM.

In our environment we push the software via Azure Intune and on PA we have selected disallow for GP client upgrade.

Regards

Re: Force GP client upgrade

Mick_Ball — Mon, 09 Nov 2020 17:23:15 GMT

are you sure this is because of users not disconnecting, we also have transparent but some devices just refuse to upgrade.

when you disconnect the gateway session, do you see them getting a portal config in the system monitor?

Re: Force GP client upgrade

Bailee — Thu, 26 Nov 2020 07:46:11 GMT

Are there upgrade requirements for the GlobalProtect Client software? Example: I'm on a 4.0.X version wanting to update the client software to 5.0.3. Are there any intermediate versions that I would need to upgrade to first before updating to 5.0.3?

One Vanilla

Re: Force GP client upgrade

MP18 — Wed, 25 Nov 2020 14:43:42 GMT

@Bailee

In case of GP you can directly upgrade to required version.

Regards

Re: Force GP client upgrade

ce1028 — Tue, 01 Dec 2020 18:40:19 GMT

@Mick_Ball

Sorry for late response, I forgot to reply. It seems the issue has to do with the windows service. Seems that transparent upgrade only works if you restart the window service or reboot the computer

Maybe I'll use start using SCCM instead in the future

Re: Force GP client upgrade

sureshramesh123 — Fri, 05 Mar 2021 08:00:02 GMT

To install and activate the GlobalProtect Client, Use GUI: Device > GlobalProtect Client. Use the checknow button at the bottom to check for updates followed by Download to download the same. Next click ACES ETM Activate to activate the downloaded software.

Re: Force GP client upgrade

windowsgyaan — Mon, 15 Mar 2021 14:26:58 GMT

As an alternative to the command-line tools, you can force a Group Policy update using the Group Policy Management Console (GPMC). GPMC is included with every Service Host SysMain Windows Server since Windows Server 2008; you can also get it by installing Remote Server Administration Tools (RSAT).

To force a GPO to be applied, take these simple steps:

Open
Link the GPO to an OU.
Right-click the OU and choose the “Group Policy Update” option.
Confirm the action in the Force Group Policy Update dialog by clicking “Yes”.