Scanning campaigns against PAN OS Global Protect gateways

[k.pillai]

Recently we saw Scanning campaigns against PAN OS Global Protect gateways. Which is the stable version of Global protect client version for Windows 10/11 ?

https://thehackernews.com/2025/04/nearly-24000-ips-target-pan-os.html

https://www.bleepingcomputer.com/news/security/nearly-24-000-ips-behind-wave-of-palo-alto-global-pro...

https://www.greynoise.io/blog/surge-palo-alto-networks-scanner-activity

[kiwi]

Hi @k.pillai ,

You can always check for the current preferred release here:

https://live.paloaltonetworks.com/t5/customer-resources/support-pan-os-software-release-guidance/ta-...

As of now there are 3 preferred GP releases depending on which train you're on:

6.2.7

6.1.4-c720

6.0.7

For more details please check out the release notes link next to each release version.

Kind regards,

-Kim.

[k.pillai]

Thanks @kiwi  , GP 6.2.7 seems stable version .The current Preferred Release of GlobalProtect 6.2.7 runs on all currently supported PAN-OS versions, and there is no specific upgrade path from the  version (6.0.8).