Global Protect Client Backward Compatibility

MHaran — Fri, 04 Nov 2016 19:31:39 GMT

Hi,

We have around 500 concurrent SSL clients connecting to our Palo Alto Gateway using Global Protect version 3.0.1.

If I activate the newest version on the Firewall (Version 3.1.3), will the existing clients be unaffected by this activation and continue to work.

Due to PC lockdown's in our organisation, I can't easily enforce an auto upgrade for the users so would like the existing clients to work as-is and any additional users who wish to use the SSL vpn, download the newer versions going forward.

Regards

Mike

Re: Global Protect Client Backward Compatibility

hzayed — Sun, 06 Nov 2016 09:15:22 GMT

Hi Mike,

I believe this is what you're looking for:

https://www.paloaltonetworks.com/documentation/60/pan-os/newfeaturesguide/globalprotect-features/globalprotect-agent-update-control

snip:

By default, the Agent Upgrade field is set to prompt the end user to upgrade. To modify this behavior, select one of the following options:

- If you want upgrades to occur automatically without interaction with the user, select transparent.

- To prevent agent upgrades, select disable.

- To allow end users to initiate agent upgrades, select manual. In this case, the user would select the Check Version option in the agent to determine if there is a new agent version and then upgrade if desired.

Best regrads,

Haytham

topic Re: Global Protect Client Backward Compatibility in General Topics

Global Protect Client Backward Compatibility

Re: Global Protect Client Backward Compatibility