GlobalProtect for iOS and Intune data attributes

CKobelsky — Fri, 10 Mar 2023 15:39:15 GMT

Hello everyone! I'm currently working on setting up GlobalProtect and having it send appropriate HIP data to the firewall. I got Windows devices working pretty well, but I'm struggling with iOS devices that are managed by Intune

According to https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/mobile-endpoint-management/mobile-endpoint-management-overview there are 4 attributes that are supported by , but I can't figure out how to get GlobalProtect to send this info to the firewall

I went through and configured Intune to send a VPN configuration (https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/mobile-endpoint-management/manage-the-globalprotect-app-using-microsoft-intune/configure-microsoft-intune-for-ios-endpoints/configure-a-per-app-vpn-configuration-for-ios-endpoints-using-microsoft-intune) and it installs fine, but the HIP data does not contain the 4 attributes. I'm running the latest GlobalProtect client on iOS (6.0.5) and the firewalls are running PAN-OS 10.2.3.

Does anybody know how to make this work? I'm sure I'm just missing a step someplace

Re: GlobalProtect for iOS and Intune data attributes

Ken_Carvel — Wed, 10 May 2023 18:46:45 GMT

Was there a solution for this?

Thanks,
Ken

Re: GlobalProtect for iOS and Intune data attributes

CKobelsky — Mon, 28 Aug 2023 19:25:07 GMT

Ends up it is basically not supported. In Intune you can configure the VPN policy to send out the attributes but they are static. So in the end it wasn't useful at all. If you use AirWatch (Vmware ONE or something) it works much better apparently.

topic Re: GlobalProtect for iOS and Intune data attributes in GlobalProtect Discussions

GlobalProtect for iOS and Intune data attributes

Re: GlobalProtect for iOS and Intune data attributes

Re: GlobalProtect for iOS and Intune data attributes