global protect client --- software not updating on user pc

[MP18]

i have upgraded GP with latest 4.1.6

client is connected but he software on user pc is 4.1.4

i refresh the connection still client pc is sitting on version  4.1.4?

[gwesson]

What value do you have for "Allow User to Upgrade GlobalProtect App" under Network > GlobalProtect > Portals > {portal-name} > Agent tab > {config-name} > App tab?

Set it to "Allow with Prompt" or "Allow Transparently" to upgrade it after a user prompt or silently. Choose "Internal" if you want it to upgrade the app only when the user is internal to the network rather than external.

If it's set to "Disallow" or "Allow Manually" it won't update when it connects.

[MP18]

it is set to allow with prompt.

And it is internal gateway

[MP18]

Akso when i click on check for update it says you have most recent version

[gwesson · Accepted solution]

Thanks for that info. 

Last question: If you browse to Device tab > GlobalProtect Client, on the 4.1.6 row, does the Action column show "Activate", "Download", or "Reactivate"? If it's Reactivate, I am not sure why the upgrade isn't happening. If it's just "Activate", then 4.1.6 has been downloaded but not activated yet and you'll need to hit Activate to make it the active version.

As long as your client is connecting to the gateway, it should be fine.

[MP18]

it shows reactivate only.

will try to log off and log on to pc

[MP18]

only way it worked was to signout from the client by going to settings and then clicking on sign out.

login again it force you for auth.

IT works when we connect to portal.

Thanks for your help.

[Chacko42]

Hi @gwesson - do you have experience, what exactly happens in the background, when choosing this option:

"Allow Transparently—Upgrades occur automatically without user interaction. Upgrades can occur
when the user is working remotely or connected within the corporate network."

We tried to upgrade with this "transparent mode", but the GP app did not upgrade - we were connected for at least 1 hour.

Will the user get disconnected, will it upgrade after disconnecting from portal, on reboot?

Neither of the things happened to us and the admin guide is not really helpful

[gwesson]

It only updates when connecting to the portal itself, not while connected. With the transparent option enabled, the user will not see anything other than GP reconnecting after the upgrade is completed.

With the setting enabled and the GP client on an older version than the bundle on the firewall, launch GP and confirm the version then connect (successfully) to the firewall. Once the upgrade is complete and GP has reconnected, you should see the version updated.