Hiding Global Protect version

[FWPalolearner]

Hello ,

for one of our customer , they did some pentest and came back with a report that our Global Protect Portal shows the version of GP

They advised if is it possible to hide GP version info . 

When a user opens the GP Portal , version info is not displayed . But could be with pentest/VA tool it is

So is there a way to completely hide version related info for GP so that a hacker or pentester cant see it 

[TomYoung]

Hi @FWPalolearner ,

Have you tried disabling the portal page -> https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClbpCAC  I am curious if it will work.  It may not.  I viewed the source HTML of my portal, and I don't see version info.  The GP client and portal exchange versions in order to determine if a client upgrade is necessary.  I would hope that occurs after login.

Many of my customers use software distribution servers to roll out the GP client, and they do not need the portal.  You would use the method that works best for you.

Thanks,

Tom

[FWPalolearner]

Hi @TomYoung 

Can you share the info on this link.

I can't open the page

[TomYoung]

Hi @FWPalolearner ,

The link is fixed now.

Thanks,

Tom