Error message "Installed version of OpenConfig plugin is not compatible with PanOS 10.2.X" seen when trying to activate GlobalProtect App
10621
Created On 12/05/24 04:48 AM - Last Modified 01/14/25 10:58 AM
Symptom
- GlobalProtect App 6.2.6 downloaded on the Firewall running PAN-OS 10.2.x.
- When trying to activate the GP App, error message"Installed version of OpenConfig plugin is not compatible with PanOS 6.2.6" is displayed.
Environment
- Palo Alto VM based Firewall
- PAN-OS 10.2.12
- OpenConfig Plugin installed
Cause
Software Issue.
Resolution
- This issue was discovered internally and has been fixed in PAN-OS 11.0.3, 11.1.0 and higher versions.
- Upgrade of the PAN-OS should resolve the issue.
- As a workaround one can uninstall the OpenConfig plugin, activate the GP app then install the plugin again. Refer details in the "additional information" section below.
Additional Information
If you do not want to change PAN-OS version, you can activate GP app with uninstalling the installed OpenConfig plugin
- Take a backup of device state and configuration snapshot before making changes. Refer How To Take Backups On Palo Alto Networks Firewalls.
- Uninstall the OpenConfig plugin
Go to Device > Plugins > find the installed OpenConfig plugin > uninstall it - Activate the Global protect client
Go to Device > GlobalProtect Client > Activate GP app 6.2.6 - If needed, reinstall the OpenConfig Plugin again.
Go to Device > Plugins > find OpenConfig that you uninstalled > install it again