Resolved! GP Client not updating transparently on Win10 machines (5.2.6 -> 5.2.8)
I've done two previous client updates through the firewalls that went fine. The first was 5.0.4 -> 5.1.5 with the portal set to allow user to update manually. Everything went fine. At the time, I think PAN-OS was 8.1.something
The second was 5.1.5
...