topic Minimum allowed version of Global Protect in General Topics

Minimum allowed version of Global Protect

raji_toor — Fri, 12 Apr 2019 15:24:12 GMT

1st/ Can we check with HIP what version of GP they are using to connect.

2nd/ Can we force users/clients to be above a minimum version to be able to connect.

Re: Minimum allowed version of Global Protect

hshawn — Fri, 12 Apr 2019 15:51:21 GMT

1. Yes you can check on the version of the GP client. Remember you will have to change this each time you update the client. Also if you have vendors with their own version of the client you will need to take that into consideration when designing out the HIP profiles/objecsts/policies

2. I don't think the version check is robust enough for this however you could setup custom checks and look at the registry

Re: Minimum allowed version of Global Protect

raji_toor — Fri, 12 Apr 2019 17:26:46 GMT

@hshawn Can you tell me how can i check version of the connecting/connected clients. I don't see a tab for GP in HIP objects.

Re: Minimum allowed version of Global Protect

hshawn — Fri, 12 Apr 2019 17:28:36 GMT

Should be right in the Host Info section: