topic Notify message of upgrade in GlobalProtect in General Topics

Notify message of upgrade in GlobalProtect

aromero — Fri, 07 Sep 2018 13:22:00 GMT

Is possible to notify an user with a message that the globaprotect client will be updated before the update?

Re: Notify message of upgrade in GlobalProtect

Remo — Fri, 07 Sep 2018 14:24:34 GMT

If you set the agent upgrade config to "Alllow with prompt" the user will be notified when a new version is available and he is then able to choose if he want to install the new version or not. When you set it to "tranparent" the user won't receive any information.

Global Protect Portal App Settings: https://www.paloaltonetworks.com/documentation/80/pan-os/web-interface-help/globalprotect/network-globalprotect-portals/globalprotect-portals-agent-configuration-tab/globalprotect-portals-agent-app-tab

Re: Notify message of upgrade in GlobalProtect

AnalysisMan — Sat, 08 Sep 2018 01:56:00 GMT

There is an option with "Allow with prompt", which shows the prompt for the upgrade. However, please keep in mind that many people do not click on the upgrade prompt. We were using this option a long time ago, and many people never upgraded their GP client. When a bug hit on GlobalProtect by Dynamic Updates, it impacted on the GP client users with lower versions. And they couldn't connect to the VPN. Therefore, I've changed the option to "Transparent" for mandatory update.

Hope this helps!

Re: Notify message of upgrade in GlobalProtect

MikeC — Sat, 08 Sep 2018 15:16:08 GMT

As others have said, "Allow with prompt" is what you're looking for.

FWIW, this is how I do it, maybe it will work for you.

1) Send an email to all GP users about the upgrade and provide screen shots of what they will experience

2) Set GP to "Allow with prompt"

3) Install GP version

4) After 2 weeks, I check how many users are still on the old version and send a reminder email

5) After 2 more weeks, set it to transparent

6) Once everyone is upgraded, I set it back to "Allow with prompt"