How to update from 5.0.5 to 5.2

VPN
1

Hi all

We are using Global Protect as our vpn solution in my organisation, but everytime I try to download the MSI the version it downloads is 5.0.5 instead of the latest 5.2. Also if I try to update from the app it keeps saying it’s on the latest version.

Is there something I’m missing

I’m pretty new at this. Sorry if the question may sound dumb

Thank you

2

For a second there I thought it was 2012

3

5.0.5 is likely the version enabled on the portal firewall. Will need to download and enable the newer version on the portal firewall as described in the link before you can upgrade to it. You can also download newer versions through the Palo Alto support portal if you have access.

4

Are you the firewall administrator or do you just use the client?

If you are just a user with the Global Protect client, then you’re probably out of luck because the firewall admin can set client configs to permit upgrades or not. Also, the admin also determines which version is published on the vpn portal. If you are the admin and need to know how to do this, then I can try to explain further.

5

If you have downloaded and approved the 5.2.x version on the firewall, it should present for download that version when accessing the url for your GlobalProtect instance. Also, depending on the policy set for your clients, the behavior regarding how it upgrades will differ (manual, user prompt, transparently, etc.)

6

If you go to the following URL and sign in with your Palo Alto account, you can download all the versions of Global Protect without activating it on the firewall.

https://support.paloaltonetworks.com/Updates/SoftwareUpdates/

7

Go to Device > GlobalProtect Client and click on Check Now on the bottom left of your screen. That should refresh and update the versions available to you.

Download and activate the one you want (I had a recent discussion with a PA engineer and 5.2.3 is the current preferred version) and depending on your settings when a user refreshes their VPN connection they will get prompted to update or it will happen seamlessly.

8

Per PA’s website, 5.2.4 is the preferred version. I updated to it a couple weeks ago once it changed to preferred.

9

Interesting, I spoke to them before Xmas (because we upgraded to 5.2.4 and had a saml issue) and they asked to roll down to 5.2.3 for now because 5.2.4 was still being monitored. Guess you experienced nothing of the sort then?

10

We’re using SAML and did not have issues with 5.2.3 or 5.2.4. I’m testing 5.2.5 now without issues, too.