topic Re: Did anyone succesfully connect with globalprotect through the IOS App ? in General Topics

Did anyone succesfully connect with globalprotect through the IOS App ?

NOC-Alliade — Sat, 30 Mar 2013 19:26:57 GMT

Hi,

I just downloaded the app from the appstore, and just at the point where i got enthusiastic, i got a certificate error which should not be there because the chain is correct.

After clicking OK, i got the error "Cannot connect to Globalprotect. Your internet connection or Globalprotect network appears te be offline." But if i try to connect through the builtin Cisco client, everything works fine and quick.

Anyone a good idea to solve this ?

Kind regards,

René Posthumus

Re: Did anyone succesfully connect with globalprotect through the IOS App ?

Retired Member — Sat, 30 Mar 2013 19:53:58 GMT

IOS app needs both Portal and Gateway license.

Re: Did anyone succesfully connect with globalprotect through the IOS App ?

jwolach — Mon, 01 Apr 2013 14:43:08 GMT

I got it working just fine on my iPhone 4S running iOS v6.1.2.

Re: Did anyone succesfully connect with globalprotect through the IOS App ?

Retired Member — Mon, 01 Apr 2013 14:49:22 GMT

I got it working just fine on my iPhone 4S running iOS v6.1.2.

-------------------------------------------------------------------------------------

You mean GP on apple market ?

if yes than there is something wrong on their document

Re: Did anyone succesfully connect with globalprotect through the IOS App ?

jwolach — Mon, 01 Apr 2013 15:06:25 GMT

Yes, the GlobalProtect iOS app from the Apple AppStore. Works great on my iPhone.

Re: Did anyone succesfully connect with globalprotect through the IOS App ?

Retired Member — Mon, 01 Apr 2013 15:57:19 GMT

interesting.Something wrong but what.

Support will answer that.

Re: Did anyone succesfully connect with globalprotect through the IOS App ?

ericgearhart — Mon, 01 Apr 2013 16:40:48 GMT

As I understand it you only need the GlobalProtect subscription if you want to do HIP Profile type stuff when your iDevice connects. The table in that image above is misleading... you don't have to have a GP subscription if you just want to provide VPN connectivity, only if you want to do the HIP Profile matching.

Re: Did anyone succesfully connect with globalprotect through the IOS App ?

kfindlen — Mon, 01 Apr 2013 16:47:22 GMT

The new native iOS application requires the GlobalProtect gateway subscription to be active on the firewall in order to connect. Using the builtin VPN client and having X-Auth enabled in the GlobalProtect configuration does not require the license and continues to be a supported configuration.

Re: Did anyone succesfully connect with globalprotect through the IOS App ?

ericgearhart — Mon, 01 Apr 2013 16:54:53 GMT

Ah I see. I was thinking of the old X-Auth method, I didn't realize a GP subscription was needed for the new iOS app. Good to see an official confirmation from PA on this.

Re: Did anyone succesfully connect with globalprotect through the IOS App ?

Retired Member — Mon, 01 Apr 2013 17:00:05 GMT

I am confused.

what jwolach is saying this new ios app. is working.So maybe they use with license ???

Gp for iphone

1- no license needed

2-only portal

3- portal with gateway

Re: Did anyone succesfully connect with globalprotect through the IOS App ?

kfindlen — Mon, 01 Apr 2013 17:08:46 GMT

Bulent,

Option 3 would be the requirement for using the native iOS application from the App Store.

Re: Did anyone succesfully connect with globalprotect through the IOS App ?

Retired Member — Mon, 01 Apr 2013 17:12:59 GMT

Ok so document is correct.

Thanks.

Re: Did anyone succesfully connect with globalprotect through the IOS App ?

jwolach — Mon, 01 Apr 2013 17:39:12 GMT

My question is... since every PA firewall already comes with 1 Portal and 1 Gateway license, do I need to purchase an additional Portal & Gateway subscription to use the iOS GP app? If so, why?

Re: Did anyone succesfully connect with globalprotect through the IOS App ?

Retired Member — Mon, 01 Apr 2013 17:41:06 GMT

You are talking for NFR ?

Everyone does not have these licenses.

if you have 1 for both no you don't need to buy.

Re: Did anyone succesfully connect with globalprotect through the IOS App ?

NOC-Alliade — Tue, 02 Apr 2013 07:03:08 GMT

I think, if it's true that for using the GP iOS client, you need a portal & gateway license, it's marketing.

PA is bringing a common feature and presents it as new and let users/organizations pay for it to make some money, while using the GP client on another platform is free of charge, even when you don't own a portal and gateway license.

Re: Did anyone succesfully connect with globalprotect through the IOS App ?

Retired Member — Fri, 05 Apr 2013 11:39:33 GMT

Last answers from PaloAlto

What GlobalProtect license is required?

The GlobalProtect gateway subscription is required. Customers who already have the

GlobalProtect gateway subscription do not need to purchase any additional licenses to use the

app.

Do I need GlobalProtect portal license as well?

No, GlobalProtect Portal is not mandatory if you are only using one external gateway (HA or

standalone). In these scenarios, if you currently don't have a portal license, then you will only need

to purchase the gateway subscription in order to use the app.

Re: Did anyone succesfully connect with globalprotect through the IOS App ?

ericgearhart — Fri, 05 Apr 2013 13:49:11 GMT

What the heck! So you can use the iOS App, but you won't get HIP profiles with it unless you buy a portal license? Is that correct?

Re: Did anyone succesfully connect with globalprotect through the IOS App ?

Retired Member — Fri, 05 Apr 2013 14:00:30 GMT

That is correct but you need a gateway license