Does anyone know the command that would show/display the version of GlobalProtect client for all users?
This info can be found through GUI under HIP match logs then go to a log details. However, this only shows GlobalProtect client version of specific user or machine.
You can get the same info from the CLI by running below command but again just for a specific user/machine/IP in this case.
debug user-id dump hip-report computer <computer> ip <ip-address> user <username> | match <client-version> <client-version>4.1.4-13</client-version>
Was told by support that this might be the reason:
GPC-7620
Administrators configure Custom checks to identify whether the connecting device is a corporate issued device or managed device by looking for one or more specific registry keys/plist entries.
The custom check information must not be visible to the end-user as this will allow a user to copy/use this information to mimic a personal/3rd party device as a corporate/managed device.
Please hide the custom check information from the host profile section of the GlobalProtect App.