Please advise on upgrading GlobalProtect using Intune.

[y.saitou]

Attention: JAPAC TPM team
Hello Team,

We are considering upgrading GlobalProtect using Intune.
Under GlobalProtect Setup > GlobalProtect App > App Settings > Upgrade GlobalProtect,
if Disallow is selected, will this affect upgrading GlobalProtect via Intune?

My understanding is that Disallow only prevents users from upgrading manually,
and it does not impact upgrades performed through Intune.

If there are any limitations regarding the behavior of the Disallow setting,
I would appreciate your guidance.

[kiwi]

Hi @y.saitou ,

Your understanding is correct.

Disallowing the "Upgrade GlobalProtect App" in the Portal configuration prevents manual, user-initiated upgrades via the GlobalProtect application interface. It does not interfere with upgrades pushed by enterprise endpoint management systems like Intune, SCCM, or other MDM solutions.

Hope this helps,

Kim.