topic Re: Global protect in GlobalProtect Discussions

Global protect

JeanPaul222 — Mon, 12 May 2025 07:24:08 GMT

Hello,

After upgrading the GlobalProtect client, will users still be able to connect properly if they are using an older version?

Additionally, how can I test the upgrade on a small group of users before deploying it across the entire production environment?

Could you also advise on the key points to ensure a smooth upgrade process?

Thank you,
PaloAltor-FR

Re: Global protect

mshekh — Mon, 12 May 2025 08:12:02 GMT

Hi @JeanPaul222 ,

Yes, user will be able to connect to old version and newly installed version.

You can manually install the Global protect on small group to test.

Betreff: Global protect

M.Falk310364 — Thu, 22 May 2025 04:58:53 GMT

is it possible to block old version of clients?

Re: Global protect

mshekh — Thu, 22 May 2025 06:39:59 GMT

Hi @M.Falk310364 ,

You can create a HIP object that is used as a match condition in security policies to require a minimum GP client version, and this could be used to block access to any/all resources for the users on the old GP versions. They would still be able to connect to GP, but would not be able to access anything. If you'd like to set this up, Please refer the below link for more details.

https://live.paloaltonetworks.com/t5/general-topics/minimum-allowed-version-of-global-protect/td-p/257439

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm5WCAS