How to generate report for Global Protect versions on endpoint

[LuckyLau]

Hi Palo Alto community,

I am new to Global Protect management portal. I have the access to view the firewall and I would like to see what version of Global Protect are all the end users are using. Is there a way for me to generate the up to date report? 

I would like to confirm that there's no inconsistent version of GP on the devices. 

Thanks for helping! 

[BPry · Accepted solution]

@LuckyLau,

This depends on what version of PAN-OS you are running. As long as you have 10.0 or higher installed, you can generate a custom report with the Client Version that will give you all of the versions you have. You can customize that report with other fields like source user or machine name to narrow it down to user/computer for tracking down anyone that isn't running the version you want.

Prior to 10.0 you would need to utilize HIP Objects to get the agent versions and keep track of it that way. You can still do reporting on match name and keep track of who isn't running the latest agent versions, you just have to built it out yourself and this method would demand you have a GlobalProtect subscription. 

[LuckyLau]

Thanks BPry! This is really helpful. I will give it a try. 😊