topic Hiding Global Protect version in General Topics

Hiding Global Protect version

FWPalolearner — Sat, 06 Nov 2021 07:35:02 GMT

Hello ,

for one of our customer , they did some pentest and came back with a report that our Global Protect Portal shows the version of GP

They advised if is it possible to hide GP version info .

When a user opens the GP Portal , version info is not displayed . But could be with pentest/VA tool it is

So is there a way to completely hide version related info for GP so that a hacker or pentester cant see it

Re: Hiding Global Protect version

TomYoung — Sat, 06 Nov 2021 19:03:18 GMT

Hi @FWPalolearner ,

Have you tried disabling the portal page -> https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClbpCAC I am curious if it will work. It may not. I viewed the source HTML of my portal, and I don't see version info. The GP client and portal exchange versions in order to determine if a client upgrade is necessary. I would hope that occurs after login.

Many of my customers use software distribution servers to roll out the GP client, and they do not need the portal. You would use the method that works best for you.

Thanks,

Tom

Re: Hiding Global Protect version

FWPalolearner — Sat, 06 Nov 2021 17:37:49 GMT

Hi @TomYoung

Can you share the info on this link.

I can't open the page

Re: Hiding Global Protect version

TomYoung — Sat, 06 Nov 2021 19:04:03 GMT

Hi @FWPalolearner ,

The link is fixed now.

Thanks,

Tom