How to Disable GlobalProtect Agent Upgrade for Specific User Groups

Steps

To allow GlobalProtect Agent Upgrades to only specific users, a separate 'client configuration' needs to be configured under the GlobalProtect Portal. Follow the steps below:

1. Go to Network > GlobalProtect > Portals > Client Configuration and Click Add, add a profile for the desired group of users
   In this example, 'support users' are allowed to upgrade and the upgrade is disabled for 'corp users':
   
2. Under Agent Configs > Agent Upgrade, select 'disabled' from the drop down menu within the client configuration for 'corp users':
         
3. Create a separate profile for support users and select the 'transparent' option for Agent Upgrade and click OK.
   

owner:  ukhapre