topic Re: Prisma Access - GlobalProtect APP version in Prisma Access Discussions

Prisma Access - GlobalProtect APP version

DLONGPRÉ — Thu, 19 Mar 2020 22:34:08 GMT

Is there any way to see which GP APP version is currently used ?

Re: Prisma Access - GlobalProtect APP version

SuperMario — Sat, 14 Mar 2020 01:31:00 GMT

Hi DLONGPRE,

If you are referring to see which client is on the Prisma Access Portal, currently there is no way to see that.

You can always see the version once the client is installed.

Also, Prisma Access updates the client as follows:

Major GlobalProtect App Releases (for example, x.0 or 5.x)—Prisma Access updates the agent on the portal with the latest major release 7-10 days after the general availability of the x.0.1 version of that release.

For example, given an agent release of 5.1, Prisma Access updates the agent on the portal 7-10 days after the release of 5.1.1.
Minor GlobalProtect App Releases (for example, 5.1.x)—Prisma Access updates the agent on the portal with the latest minor release 7-10 days after the general availability of that release.

Reference:

https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/prisma-access-overview/release-cadence-for-prisma-access-infrastructure-updates#id59875482-646e-4bbb-a351-aadfc3d7ba12_idae6470ac-b942-455d-b63e-45f7b4ff82d3

If you wish to manage the client version, simply follow the steps from the link below:

https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/prisma-access-overview/manage-the-globalprotect-app.html#id5f52b7ca-ef0f-433d-a3d0-f062e1a63f78_id4bb6a04c-473a-43e2-91ea-56386ff60792

I hope this helps.

Re: Prisma Access - GlobalProtect APP version

DLONGPRÉ — Wed, 06 May 2020 18:44:42 GMT

I'm little bit concerned about the actual GP Agent version on Prisma which is still 5.0.9-15 since 5.1.x is available for "long time".

Should 5.1 be available since minor 5.1.1 is available since 2020/02/24 ?!

I'm confuse why 5.1.3 (or 5.1.1) is not the current agent release available ?

Re: Prisma Access - GlobalProtect APP version

LCMember4240 — Fri, 12 Jun 2020 16:41:20 GMT

I would like to second that, with recently announced vulnerabilities, it would be great to have the latest version available as soon as possible or at least have some degree of client deployment in Prisma Access. At the moment we are forced to ask users to manually upgrade GP client.

GlobalProtect App

CVE-2020-2032 GlobalProtect App: File race condition vulnerability leads to local privilege escalation during upgrade (Severity: HIGH)

https://security.paloaltonetworks.com/CVE-2020-2032

CVE-2020-2033 GlobalProtect App: Missing certificate validation vulnerability can disclose pre-logon authentication cookie (Severity: MEDIUM)

https://security.paloaltonetworks.com/CVE-2020-2033

Re: Prisma Access - GlobalProtect APP version

DLONGPRÉ — Fri, 12 Jun 2020 17:15:46 GMT

I have been told that feature will be available on Prisma PlugIn 1.7.