Disclaimer

Known affected versions were inferred from fixed-version data and were not explicitly confirmed by the vendor: 11.1.13-h3, 11.2.10-h5, 12.1.4-h3

The earliest recollection of this bug is traced back to PAN-OS 11.1.14 - June 10, 2026. This bug is fixed in PAN-OS versions 12.1.5, 11.2.11, 11.1.14. Fixed an issue where users with a custom role-based administrator role were unable to download the GlobalProtect client application via the web interface even when the GlobalProtect Client option was enabled in the admin role profile. For more information: https://docs.paloaltonetworks.com/ngfw/release-notes/12-1/pan-os-12-1-5-known-and-addressed-issues/pan-os-12-1-5-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-14-known-and-addressed-issues/pan-os-11-1-14-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-11-known-and-addressed-issues/pan-os-11-2-11-addressed-issues