To: Panorama 6 Users
Date: September 30, 2018
Subject: Retiring Panorama 6
The first lines of Panorama source code were written on October 31st, 1986. If you had told me that that line of code would still be in daily use all across the world in 2018, I would have been pretty incredulous. Amazingly, the code I wrote that first day is still in the core of the program, and that specific code I wrote 32 years ago actually still runs every time you click the mouse or press a key in Panorama 6 today.
Of course Panorama has grown by leaps and bounds over the ensuing years and decades:
Along the way Panorama was highly reviewed in major publications, won awards, and gained thousands of very loyal users. It's been a great run, but ultimately there is only so far you can go with a technology foundation that is over thirty years old. It's time to turn the page, so we are now retiring the "classic" version of Panorama so that we can concentrate on moving forward with Panorama X. gp force update command
If you are still using Panorama 6, you may wonder what "retiring" means for you. Don't worry, your copy of Panorama 6 isn't going to suddently stop working on your current computer. However, Panorama 6 is no longer for sale, and we will no longer provide any support for Panorama 6, including email support. However, you should be able to find any answers you need in the detailed questions and answers below.
The best part of creating Panorama has been seeing all of the amazing uses that all of you have come up with for it over the years. I'm thrilled that now a whole new generation of users are discovering the joy of RAM based database software thru Panorama X. If you haven't made the transition to Panorama X yet, I hope that you'll be able to soon! | Symptom | Likely Root Cause | Fix
Sincerely,

Jim Rea
Founder, ProVUE Development
| Symptom | Likely Root Cause | Fix | |---------|------------------|-----| | Client reports 6.2.0, gateway sees 5.2.10 | Two GP installations; older one is still registered in registry (Windows) | Run PANGPA_uninstaller tool, clean registry | | macOS shows updated but still blocked | The system extension remains from old version | sudo kextunload com.paloaltonetworks.GlobalProtect.client | | Linux user blocked despite manual install | The gateway sees kernel module version, not UI version | Reboot, reinstall with --force | | Force update works, but user can’t download | Firewall policy blocks *.paloaltonetworks.com/getsoftware | Allow outbound HTTPS to updates.gpcloudservice.com | Rather than flipping force_update=yes abruptly, follow this pattern:
Enter the command—not a single CLI line, but a strategic enforcement mechanism that sits at the heart of GlobalProtect’s version control architecture. This article explores its internals, operational nuances, and the hidden trade-offs that separate effective enforcement from user revolt. 1. What the force update Command Actually Does (And Doesn’t Do) First, a critical distinction: There is no standalone CLI command named force update on the firewall. Instead, “force update” refers to a gateway configuration setting that overrides a client’s version autonomy. It is configured under:
Network → GlobalProtect → Gateways → <Gateway> → Agent → <Agent Config> → App → Force Update
| Symptom | Likely Root Cause | Fix | |---------|------------------|-----| | Client reports 6.2.0, gateway sees 5.2.10 | Two GP installations; older one is still registered in registry (Windows) | Run PANGPA_uninstaller tool, clean registry | | macOS shows updated but still blocked | The system extension remains from old version | sudo kextunload com.paloaltonetworks.GlobalProtect.client | | Linux user blocked despite manual install | The gateway sees kernel module version, not UI version | Reboot, reinstall with --force | | Force update works, but user can’t download | Firewall policy blocks *.paloaltonetworks.com/getsoftware | Allow outbound HTTPS to updates.gpcloudservice.com | Rather than flipping force_update=yes abruptly, follow this pattern:
Enter the command—not a single CLI line, but a strategic enforcement mechanism that sits at the heart of GlobalProtect’s version control architecture. This article explores its internals, operational nuances, and the hidden trade-offs that separate effective enforcement from user revolt. 1. What the force update Command Actually Does (And Doesn’t Do) First, a critical distinction: There is no standalone CLI command named force update on the firewall. Instead, “force update” refers to a gateway configuration setting that overrides a client’s version autonomy. It is configured under:
Network → GlobalProtect → Gateways → <Gateway> → Agent → <Agent Config> → App → Force Update