Hardware reference guide

50 GlobalProtect Administrator’s Guide

Deploy the GlobalProtect Client Software Set Up the GlobalProtect Infrastructure

Host Agent Updates on a Web Server

If you have a large number of client systems that will need to install and/or update the GlobalProtect agent

software, consider hosting the GlobalProtect agent software images on an external web server. This helps

reduce the load on the firewall when users connect to download the agent. To use this feature, the firewall

hosting the portal must be running PAN-OS 4.1.7 or later.

Host GlobalProtect Agent Images on a Web Server

Step 1 Download the version of the

GlobalProtect agent that you plan to host

on the web server to the firewall and

activate it.

Follow the steps for downloading and activating the agent software

on the firewall as described in Host the GlobalProtect Agent on the

Portal.

Step 2 Download the GlobalProtect agent image

you want to host on your web server.

You should download the same image

that you activated on the portal.

From a browser, go to the Palo Alto Networks Software Updates site

and

Download the file to your computer.

Step 3 Publish the files to your web server. Upload the image file(s) to your web server.

Step 4 Redirect the end users to the web server. On the firewall hosting the portal, log in to the CLI and enter the

following operational mode commands:

> set global-protect redirect on

> set global-protect redirect location <path>

where <path> is the path is the URL to the folder hosting the image,

for example

https://acme/GP.

Step 5 Test the redirect. 1. Launch your web browser and go to the following URL:

https://<portal address or name>

For example, https://gp.acme.com.

2. On the portal login page, enter your user

Name and Password

and then click

redirect you to the download.