Allow User to Uninstall GlobalProtect App is set to 'Allow with password'.Allow User to Upgrade GlobalProtect App as Allow with Prompt/Manually/Transparently (This will be blocked).Allow User to Uninstall GlobalProtect App is set to Disallow.(In this case, the users will be able to upgrade transparently without any interaction and the passcode/password will not be allowed) Allow User to Upgrade GlobalProtect App as Allow with Prompt/Manually/Transparently.Allow User to Uninstall GlobalProtect App is set to Allow.Starting with 5.2.5 or above, following is the behavior: If you are using GP version older than 5.2.4, the transparent upgrade should work where the user will have no interaction and they can upgrade even if the allow uninstalled is disallowed.

In a nutshell with the new GP clients you will need to set the client setting to allow uninstall, if you want to utilize the Global Protect client upgrade process.Ĭlients 5.2.4 or older, following is the behavior:

This was identified as a software issue so in clients 5.2.5 and newer the ability to upgrade the client with uninstall option set to password or disallow was disabled. In GP client 5.2.4 and older the upgrade would complete even if uninstall with a password or disallow was enabled. Working with Palo Alto networks TAC they identified that during the upgrade the GP client package will uninstall the old version first before it will begin to install the new package.

Recently there has been a change in the behavior when a user tries to upgrade the GP client, they are challenged with the uninstall password if configured with one.

How to uninstall globalprotect on mac