topic Re: GP Compatibility on Windows Server in General Topics

GP Compatibility on Windows Server

Matlu_NN — Wed, 07 Jun 2023 21:10:42 GMT

Hello, everyone.

Does anyone know if you can install the Global Protect agent, on Windows servers, such as 2012, 2016, 2019????

Is there a documentation that tells me and confirms this?

I see in the Palo Alto Firewall, that the computer does not give me the option to select a HIP OBJECT criteria, based on OS for example, for the Windows Servers, as everything listed, only talks about Windows end clients.

Thanks for your comments.

Re: GP Compatibility on Windows Server

TomYoung — Wed, 07 Jun 2023 22:43:23 GMT

Hi @Matlu_NN ,

This doc only mentions Windows workstation OSes -> https://docs.paloaltonetworks.com/compatibility-matrix/globalprotect/where-can-i-install-the-globalprotect-app#id7a3c3401-b233-43b0-8d78-dfceab88798f_id0204a5d9-4857-4979-8fa0-14809d8e697b. So, it doesn't look like GP is supported on Windows server.

Thanks,

Tom

Re: GP Compatibility on Windows Server

Raido_Rattameister — Thu, 08 Jun 2023 01:00:21 GMT

It works but HIP for example reports incorrect OS version so if you have HIP based on OS patching then you will have hiccups.

Not in support matrix so TAC won't help.

Re: GP Compatibility on Windows Server

OtakarKlier — Thu, 08 Jun 2023 16:54:09 GMT

Hello,

I agree that it would be nice to have. If using HIP, use other things rather than OS as a criteria for your servers. Perhaps a special secret file you place in a deep directory or other software agents that are used, backup, security, AV, etc.

Regards,

Re: GP Compatibility on Windows Server

Matlu_NN — Thu, 08 Jun 2023 17:04:49 GMT

Hello,

I have performed the agent installation test on Windows Server, and the test has been successful.

If it is not in the Palo Alto matrix, what does this mean, that if I have a problem with a user in his GP connections from his Windows Server, "I guess" that TAC will not give me any support, right?

A criterion to apply object HIP, can be the "serial" of the Laptop that uses a user ????

Greetings.

Re: GP Compatibility on Windows Server

BPry — Thu, 08 Jun 2023 21:09:29 GMT

@Matlu_NN,

Correct. TAC isn't going to help troubleshoot any sort of agent issue as soon as they identify that you're running it on an officially unsupported operating system.

The HIP object that you specify can be whatever you want/need to utilize within your environment.

Re: GP Compatibility on Windows Server

Raido_Rattameister — Fri, 09 Jun 2023 14:02:18 GMT

All server versions from 2012-2022 are identified as 2012.

Other than that work s fine.