Error message "Installed version of OpenConfig plugin is not compatible with PanOS 10.2.X" seen when trying to activate GlobalProtect App

Error message "Installed version of OpenConfig plugin is not compatible with PanOS 10.2.X" seen when trying to activate GlobalProtect App

10621
Created On 12/05/24 04:48 AM - Last Modified 01/14/25 10:58 AM


Symptom


  • GlobalProtect App 6.2.6 downloaded on the Firewall running PAN-OS 10.2.x.
  • When trying to activate the GP App, error message"Installed version of OpenConfig plugin is not compatible with PanOS 6.2.6" is displayed.


Environment


  • Palo Alto VM based Firewall
  • PAN-OS 10.2.12
  • OpenConfig Plugin installed


Cause


Software Issue.



Resolution


  1. This issue was discovered internally and has been fixed in PAN-OS 11.0.3, 11.1.0 and higher versions.
  2. Upgrade of the PAN-OS should resolve the issue.
  3. As a workaround one can uninstall the OpenConfig plugin, activate the GP app then install the plugin again. Refer details in the "additional information" section below.


Additional Information


If you do not want to change PAN-OS version, you can activate GP app with uninstalling the installed OpenConfig plugin

  1. Take a backup of device state and configuration snapshot before making changes. Refer How To Take Backups On Palo Alto Networks Firewalls.
  2. Uninstall the OpenConfig plugin
    Go to Device > Plugins > find the installed OpenConfig plugin > uninstall it
  3. Activate the Global protect client
    Go to  Device > GlobalProtect Client > Activate GP app 6.2.6
  4. If needed, reinstall the OpenConfig Plugin again.
    Go to Device > Plugins > find OpenConfig that you uninstalled > install it again


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000PQvpCAG&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language