topic Re: Issues GP in Iphones in General Topics

Issues GP in Iphones

BigPalo — Tue, 15 Jul 2025 08:22:15 GMT

On iPhone, the gw for SAML authentication does not open the system browser (Safari). It opens the embedded browser. We configured the "default browser" in APP config like YES.

In android is working fine but no in iPhones. Why? any incompatibility?

On the other hand, we have a gateway using only certificate for authentication. In android is login only with cert without asking for users or pass, but in iPhone is asking for credentials. Why?

It seems like GP and Iphones relationship not good

Anyone with same issues?

Re: Issues GP in Iphones

reaper — Tue, 15 Jul 2025 09:55:54 GMT

This should be supported (since GP 5.2, it does mention you may need to update pre-deployed settings) but it requires an up-to-date content version and a recent GlobalProtect to work.

You could try setting up a (fresh, not clone) profile specific to iOS/android devices to see if that changes the behavior

Re: Issues GP in Iphones

BigPalo — Tue, 15 Jul 2025 10:29:48 GMT

Hi Reaper,

Yes, we are in 6.1 GP version.

This FW only has GP gateway license. No threats & apps or any more licenses. I dont know if we need another license to use content for this,

Re: Issues GP in Iphones

BigPalo — Tue, 15 Jul 2025 10:48:12 GMT

On Android and iOS endpoints, create a VPN profile by using the supported mobile device management system (MDM) such as Workspace ONE.

Log in to Workspace ONE UEM as an administrator.
Select an existing VPN profile (DevicesProfiles & ResourcesProfiles) in the list.
Select VPN to add a VPN profile.

On Android endpoints, enter the Custom Data Key (use_default_browser_for_saml). Enter the Custom Data Value (true).

On iOS endpoints, enter the Custom Data Key (saml-use-default-browser). Enter the Custom Data Value (true).

What if we dont have any MDM solutions?

Re: Issues GP in Iphones

reaper — Tue, 15 Jul 2025 10:58:38 GMT

you do need to keep the base content package updated, even if there's no TP license, as it also contains other minor updates

Re: Issues GP in Iphones

BigPalo — Fri, 18 Jul 2025 10:18:50 GMT

OK but we dont have MDM. What would be the solution for IPhones?

Re: Issues GP in Iphones

reaper — Tue, 29 Jul 2025 17:10:31 GMT

The content package is downloaded and installed on the firewall, it doesnt require an mdm

Keeping the GP app updated is done via the appstore