Incorrect GlobalProtect Version reported in GlobalProtect Monitor

[AstonMartinF1]

When looking at the globalprotect logs within the monitor tab on my PA-3220 running 10.1.3 some clients are reporting the incorrect GP version. I have lots listed as running version 5.1.0. We currently don't have any workstations running that version.

I get the same if I run a custom report.

Any ideas why the incorrect version is being reported?

I don't have a globalprotect gateway license so not using HIP.

[nikoolayy1 · Accepted solution]

Maybe first remove globalprotect and all its files and then install again the new version as maybe some old files have remained as we had similar issue even after deleting and installing globalprotect as the normal delete did not remove all the files:

Uninstall the GlobalProtect App for Windows (paloaltonetworks.com)

GlobalProtect Error During Installation: An instance of GlobalProtect is already present on the syst...

[AstonMartinF1]

I have since found a registry setting we were pushing out which was setting the version number. On removing the registry globalprotect would no longer connect. Repair of GP fixed the issue. Need to work out a plan to change this for all other workstations with out too much disruption.

[nikoolayy1 · Accepted solution]

Maybe see active directory GPIO to change reg keys or other device management system like intune, jamf pro for MAC or maybe for the globalprotect to start  script.

Deploy Scripts Using the Windows Registry (paloaltonetworks.com)

[nikoolayy1]

I forgot to add that I have used powershell scripts to play with the windows reg keys (no need to accept this comment as a solution):

How to Get, Edit, Create and Delete Registry Keys with PowerShell (netwrix.com)

Hope it help.