GP Compatibility on Windows Server

[Matlu_NN]

Hello, everyone.

Does anyone know if you can install the Global Protect agent, on Windows servers, such as 2012, 2016, 2019????

Is there a documentation that tells me and confirms this?

I see in the Palo Alto Firewall, that the computer does not give me the option to select a HIP OBJECT criteria, based on OS for example, for the Windows Servers, as everything listed, only talks about Windows end clients.

Thanks for your comments.

[TomYoung]

Hi @Matlu_NN ,

This doc only mentions Windows workstation OSes -> https://docs.paloaltonetworks.com/compatibility-matrix/globalprotect/where-can-i-install-the-globalp....  So, it doesn't look like GP is supported on Windows server.

Thanks,

Tom

[Raido_Rattameister]

It works but HIP for example reports incorrect OS version so if you have HIP based on OS patching then you will have hiccups.

Not in support matrix so TAC won't help.

[OtakarKlier]

Hello,

I agree that it would be nice to have. If using HIP, use other things rather than OS as a criteria for your servers. Perhaps a special secret file you place in a deep directory or other software agents that are used, backup, security, AV, etc.

Regards,

[Matlu_NN]

Hello,

I have performed the agent installation test on Windows Server, and the test has been successful.

If it is not in the Palo Alto matrix, what does this mean, that if I have a problem with a user in his GP connections from his Windows Server, "I guess" that TAC will not give me any support, right?

A criterion to apply object HIP, can be the "serial" of the Laptop that uses a user ????

Greetings.

[BPry]

@Matlu_NN,

Correct. TAC isn't going to help troubleshoot any sort of agent issue as soon as they identify that you're running it on an officially unsupported operating system. 

The HIP object that you specify can be whatever you want/need to utilize within your environment. 

[Raido_Rattameister]

All server versions from 2012-2022 are identified as 2012.

Other than that work s fine.