GlobalProtect - reject logon attempts for GP versions less than X

TonyDeHart — Wed, 25 Jun 2025 12:20:26 GMT

We get a lot of drive by logon attempts to GP that I'd like to reject at the start and I've noticed a good number lately are showing a Windows client specified with version 6.2.1. Is there a way to reject GP logon attempts such that 6.3 or greater is required?

I didn't see a HIP specification for the GP Version but I may have missed it. I'd expect this to be specified BEFORE the HIP component even engages though so I'm hoping its earlier in the chain of events.

topic GlobalProtect - reject logon attempts for GP versions less than X in GlobalProtect Discussions

GlobalProtect - reject logon attempts for GP versions less than X