Palo Alto Networks Knowledgebase: How to Upgrade - GlobalProtect Agent Upgrade Process

How to Upgrade - GlobalProtect Agent Upgrade Process

Created On 08/05/19 19:56 PM - Last Updated 08/05/19 20:11 PM


This document describes the GlobalProtect Agent Upgrade Process in the "prompt" method.



By default, the Agent Upgrade field is set to prompt the end user to upgrade. This behavior can be modified by choosing different available options in the agent upgrade connect method field.


To change the connect method, inside of the WebGUI go to to Network > GlobalProtect Portal > Client Configuration and click on the desired Config > Gateways > Agent > Agent Upgrade.



  1. Download and install the GlobalProtect Client on the Palo Alto Networks firewall. To install and activate the GlobalProtect Client, go to Device > GlobalProtect Client
  2. When the user connects to the client after installation of new version, they will be prompted with the following page stating a newer version of GlobalProtect is available for download.
  3. After clicking on "Yes" it will start installing immediately, after the installation is completed the following page will appear:
  4. During the installation the VPN connection will be terminated and reestablished


• To allow automatic upgrades without interaction with the user, select the "Transparent" method

• To prevent agent upgrades, select the "Disabled" method.

• To allow end users to initiate agent upgrades, select "Manual". In this case, the user would select the Check Version option in the agent to determine if there is a new agent version and then upgrade if desired. This option will not work if the GlobalProtect agent is hidden from the user.


owner: bsyeda

  • Print
  • Copy Link

Choose Language