GlobalProtect Agent (App) Directory Structure on Microsoft Windows
91580
Created On 11/09/19 00:00 AM - Last Modified 08/13/20 21:59 PM
Environment
- Microsoft Windows
- GlobalProtect Agent (App) on Windows
Resolution
GlobalProtect Agent (App) important files are stored under following two (2) directories:
1. Installation Directory (default): C:\Program Files\Palo Alto Networks\GlobalProtect\
Binaries/executables files
PanGPS.exe (GP Service - Runs as a System service)
PanGPA.exe (GP Agent - Runs as a User process)
PanGpHip.exe (GP HIP data collection started by PanGPS)
PanGpHipMp.exe (GP HIP MP data collection started by PanGPS)
PanGPSupport.exe (GP Logs Collection)
wa_3rd_party_host_32.exe & wa_3rd_party_host_64.exe (OPSWAT OESIS binaries)
update_tmp.bat (Script to update GP App/Agent version)
Log Files
PanGPS.log (PanGPS.exe log file)
PanGpHip.log (PanGpHip.exe log file)
PanGpHipMp.log (PanGpHipMp.exe log file)
PanGPMsi.log (MSI Insallation log file)
System Files & Setup Info files
gpfltdrv.sys & gpfltdrv.inf (GP Filter Driver for split-tunneling)
pangpd.sys & pangpd.inf (PAN GP VNIC driver)
CA Certificate File
tca.cer (Trusted CA extracted from Portal config and saved as a file)
Data files
HIP_*.dat (Host Information Profile data files; e.g. HIP_AM_Report_v4.dat)
PanPPAC_*.dat (Prelogon Portal Authentication Cookie)
2. User Application Directory: C:\Users\%USERNAME%\AppData\Local\Palo Alto Networks\GlobalProtect
PanGPA.log (PanGPA.exe log file)
PanPortalCfg_*.dat (Portal Configuration data file)
PanPUAC_*.dat (Portal User Authentication Cookie)