Multiple versions needed to access different portals

[ControlMan]

We are a service company that needs to access various customer sites. Several of our customers use Palo Alto Global Protect, but not all of them are up to date, and we have to use several different versions of the Global Protect "client" software (note sure if that's the term to use) to access these various sites. As a service company, we are not in a position to dictate to our customers that hey must update their VPN software. Is there a way that a SINGLE version of the "client" can access all the various and out-dated versions of Global Protect we encounter?

[VinayRao]

I have same question, we have Mac's needs to run on 5.2.10 and windows 5.28- But when activate 5.2.8 , It asking Mac user to downgrade to the preferred version. 

[ControlMan]

Similar to my problem. 

[OtakarKlier]

Hello,

As a service company, you can recommend they upgrade and use the release notes as a reason why. What about site to site VPN tunnels? I know this might not work in many cases but worth a try. Perhaps allow only the secure remote control software from your main IP's to the client sites? 

Just some thoughts around the problem.

Regards, 

[ControlMan]

This sounds like a solution, but I need more information on how to implement this. So far, anytime I try to install a different version of Palo Alto Global Protect, I get an error message that states I have to uninstall the other version and re-install. How do I create multiple versions on the same PC?

[ControlMan]

Yeah, we recommend, but the customer makes the final call on how to secure their own network, and most choose their own path regardless of what we suggest.

[a.jones]

I set a common practice for my customers to set the "Allow Users to Upgrade GlobalProtect App" to disable in the portal agent until they are going through an upgrade process of the client. That way the upgrade/downgrade popups do not appear.

[ControlMan]

Just a thought, and it's a bit beyond my personal abilities, but has anyone tried partitioning their hard drive and installing the various versions on different partitions? Does that even make sense?

[CaptOnH2O]

Did you find a solution to this?

I'm looking for settings to apply, otherwise will create VMs for the different app versions.

[cenders]

The latest Global Protect VPN client can access all lower versions of Palo Alto firewalls.  The agent does not need to match the PanOS of the firewall you are connecting to.