topic Re: MicrosoftIntune deployed PaloAtlo VPN client not working using custom p in GlobalProtect Discussions

MicrosoftIntune deployed PaloAtlo VPN client not working using custom ports

mario_01 — Mon, 15 Jun 2020 14:12:28 GMT

Hi,

we are using Android for Work deployed by Intune. We are also deploying PaloAlto VPN Client from Managed Google Play using Intune.

With VPN client deployed from Managed Google Play we can connect to company network, but we cannot access application on custom port (2701). But with client installed from ordinary Google Play we can connect to company and also to application on a custom port. It looks like that client from protected contexts cannot use custom ports. We are not doing any configuration using Intune.

Are there any limitation usings Global Protect in Android for Work or Android Enterprise deployments?

Re: MicrosoftIntune deployed PaloAtlo VPN client not working using custom p

knarra1 — Tue, 16 Jun 2020 18:30:21 GMT

Hello Mario,

Do you have a MDM that manages Android for Work devices ? If so, there could be restrictions on applications that can send traffic through VPN . If you have a work profile defined that separates personal and business apps, please make sure to include your application in managed apps under work profile to send traffic through the VPN . Thank you

Please review following link for more details

https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/mobile-endpoint-management/set-up-a-mobile-endpoint-management-system/manage-the-globalprotect-app-using-other-third-party-mdms/configure-the-globalprotect-app-for-android.html

Regards,

Kalyan