GlobalProtect Agent (App) Directory Structure on Microsoft Windows

GlobalProtect Agent (App) Directory Structure on Microsoft Windows

49453
Created On 11/09/19 00:00 AM - Last Modified 08/13/20 21:59 PM


Environment
  • Microsoft Windows
  • GlobalProtect Agent (App) on Windows


Resolution
GlobalProtect Agent (App) important files are stored under following two (2) directories:

1. Installation Directory (default): C:\Program Files\Palo Alto Networks\GlobalProtect\
    
   Binaries/executables files
        PanGPS.exe (GP Service - Runs as a System service)
        PanGPA.exe (GP Agent - Runs as a User process)
        PanGpHip.exe (GP HIP data collection started by PanGPS)
        PanGpHipMp.exe (GP HIP MP data collection started by PanGPS)
        PanGPSupport.exe (GP Logs Collection)
        wa_3rd_party_host_32.exe & wa_3rd_party_host_64.exe (OPSWAT OESIS binaries)
        update_tmp.bat (Script to update GP App/Agent version)
        
    Log Files
        PanGPS.log (PanGPS.exe log file)
        PanGpHip.log (PanGpHip.exe log file)
        PanGpHipMp.log (PanGpHipMp.exe log file)
        PanGPMsi.log (MSI Insallation log file)
    
    System Files & Setup Info files
        gpfltdrv.sys & gpfltdrv.inf (GP Filter Driver for split-tunneling)
        pangpd.sys & pangpd.inf (PAN GP VNIC driver) 
        
    CA Certificate File
        tca.cer (Trusted CA extracted from Portal config and saved as a file)
    
    Data files
        HIP_*.dat (Host Information Profile data files; e.g. HIP_AM_Report_v4.dat)
        PanPPAC_*.dat (Prelogon Portal Authentication Cookie)

2. User Application Directory: C:\Users\%USERNAME%\AppData\Local\Palo Alto Networks\GlobalProtect
        PanGPA.log (PanGPA.exe log file)
        PanPortalCfg_*.dat (Portal Configuration data file)
        PanPUAC_*.dat (Portal User Authentication Cookie)


Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/kCSArticleDetail?id=kA10g000000PNPR&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FkCSArticleDetail

Attachments
Choose Language