GlobalProtect protect client upgrade

[jdprovine]

Well if you saw my last post I have upgrade my PA 5050 from 7.0.12 to 7.1.9 and had a few issues with an Any vs and any in my VPN.

I am now needing to upgrade my global protect client. Currently I am on 2.2.0 and not sure what the best version is to upgrade and what version I can directly upgrade too.

My plan it to use a test portal and gateway, upgrade to a new version and the then see how it all works. After that upgrade the rest of the clients

In previous version you could set individual portals to not allow them to upgrade is that still possbile in version 7.1.9? That way the only my test VPN would upgrade and I could test.

[SuryaR]

Please try this and see if it works.

Download the desired GP version on your test PC from PA-software updates page.

I have been using 3.1.6 and didnt find any issues(I should say I dont have complex environment/configuration). You can still connect to your existing Portal and GW with out disturbing any users. 

However keep in mind that everytime you authenticate, a popup shows up saying an older version exists. Do you want to upgrade.? Just simply say no.

[jdprovine]

@SuryaR

I tried that and it gave me a cert error

[SuryaR]

Understood. 

IGW's are easy and Yes, you can create multiple portals and try to restrict "test-config" access only to a test account/user. 

EGW's, would suggest to stand up a seperate GW/tunnel intf. just for testing, as routing will be affected if you try to use the same GW. 

[jdprovine · Accepted solution]

I was able to tresolve my cert issue by putting the FQDN name/cert name on the portal configuration under the agent/gateway tab instead of the IP