Hardware reference guide

GlobalProtect Administrator’s Guide 49
Set Up the GlobalProtect Infrastructure Deploy the GlobalProtect Client Software
Host Agent Updates on the Portal
The simplest way to deploy the GlobalProtect agent software is to download the new agent installation package
to the firewall that is hosting your portal and then activate the software for download to the agents connecting
to the portal. To do this automatically, the firewall must have a service route that enables it to access the Palo
Alto Networks Update Server. If the firewall does not have access to the Internet, you can manually download
the agent software package from the Palo Alto Networks Software Updates support site using an
Internet-connected computer and then manually upload it to the firewall.
You define how the agent software updates are deployed in the client configurations you define on the portal—
whether they happen automatically when the agent connects to the portal, whether the user is prompted to
upgrade the agent, or whether the end user can manually check for and download a new agent version. For
details on creating a client configuration, see Define the GlobalProtect Client Configurations.
Host the GlobalProtect Agent on the Portal
Step 1 Launch the web interface on the firewall
hosting the GlobalProtect portal and go
to the GlobalProtect Client page.
Select Device > GlobalProtect Client.
Step 2 Check for new agent software images. • If the firewall has access to the Update Server, click
Check Now to
check for the latest updates. If the value in the
Action column is
Download it indicates that an update is available.
• If the firewall does not have access to the Update Server, go to the
Palo Alto Networks
Software Updates support site and
Download the file to your computer. Then go back to the firewall
to manually
Upload the file.
Step 3 Download the agent software image.
If your firewall does not have
Internet access from the
management port, you can download the
agent update from the Palo Alto
Networks Support Site
(https://support.paloaltonetworks.com).
You can then manually
Upload the update
your firewall and then activate it by
clicking
Activate From File.
Locate the agent version you want and then click
Download. When
the download completes, the value in the
Action column changes to
Activate.
If you manually uploaded the agent software as detailed in
Step 2, the
Action column will not update. Continue to the
next step for instructions on activating an image that was
manually uploaded.
Step 4 Activate the agent software image so that
end users can download it from the
portal.
Only one version of agent software
image can be activated at a time. If
you activate a new version, but have
some agents that require a
previously activated version, you
will have to activate the required
version again to enable it for
download.
• If you downloaded the image automatically from the Update
Server, click
Activate.
• If you manually uploaded the image to the firewall, click
Activate
From File
and then select the GlobalProtect Client File you
uploaded from the drop-down. Click
OK to activate the selected
image. You may need to refresh the screen before the version
displays as
Currently Activated.