topic Re: Global Protect for OSX El Capitan in General Topics

Global Protect for OSX El Capitan

nextgenhappines — Wed, 30 Sep 2015 18:24:33 GMT

Apple just released OSX El Capitan, is GP 2.3.2 compatible/certified to use on OSX El Capitan?

Thanks,

Re: Global Protect for OSX El Capitan

cpainchaud — Wed, 30 Sep 2015 19:19:30 GMT

nope

but why would someone kill his laptop with latest version of whatever OS/vendor ? 🙂

Re: Global Protect for OSX El Capitan

nextgenhappines — Thu, 01 Oct 2015 22:53:40 GMT

That is a great question, if you are in an IT support role and you have 0 control of your clients.. You just need to stay ahead of your clients.

Re: Global Protect for OSX El Capitan

cpainchaud — Fri, 02 Oct 2015 08:17:45 GMT

I am feeling really sorry for you 😄

Re: Global Protect for OSX El Capitan

kbiswas — Sun, 04 Oct 2015 20:34:42 GMT

Hi,

GlobalProtect app version 2.3.2 -the current latest release of GlobalProtect supports Apple — OS X El Capitan and iOS 9

Hope this helps,

Kunal

Re: Global Protect for OSX El Capitan

sd@censhare.com — Mon, 12 Oct 2015 09:54:35 GMT

Maybe El Capitan is supported by 2.3.2 (it's working, yep) but I cannot choose the OS version in HiP Objects on the Firewall.

I know that I can type in "10.11"manually and the GP client shows me the running version in "Host State -> Host-info -> OS" but it looks like the GP Client cannot check things like the status of the disk-encryption.

Does anyone know when PaloAlto will support 10.11 for the HiP configuration?

Thanks,

Stephan

Re: Global Protect for OSX El Capitan

ulti — Mon, 12 Oct 2015 18:26:28 GMT

hip check for macs is still a known issue / open bug in Globalprotect. Seriously, Palo, this is why went with Palo (hip check for vpn users) and its extremely dissappointing as a customer to see this a known issue for over 10 months now?

Re: Global Protect for OSX El Capitan

jjhernandez — Mon, 09 Nov 2015 19:31:01 GMT

We have users trying 10.11.1 and while it appears the VPN portion of GlobalProtect is working, the HIP checks are failing to operate, as expected, since the v2.3.2 client doesn't officially support OSX 10.11.

Here is a Hip Check detailed record from one of our 10.11.1 users:

Doesn't see Filevault at all.
Missing key data for Sophos Antivirus / Antimalware
Cannot detect missing patches for us - This requires a supported AND enabled patch mangement agent:
-- Doesn't see the native Apple Software Updater at all.
-- Casper Suite (JAMF) is NOT supported by Opswat. PAN uses the Opswat OESIS library in GlobalProtect. (https://www.opswat.com/blog/opswat-and-palo-alto-networks-partner-provide-innovative-network-security)

I'm disappointed that PAN didn't support OSX 10.11.0 at release, let alone at 10.11.1, since Developer / beta versions were available for quite a long period prior to release.

I look forward to a version of the GlobalProtect client that fully supports OSX 10.11 so I can make my users happy.

Re: Global Protect for OSX El Capitan

jjhernandez — Sat, 19 Dec 2015 00:19:41 GMT

Update: Working well in production - recommended.

One cosmetic caveat: In the OSX client, if you go into the Panel -> Host State tab, you will find that for many categories, the Prod data is not displayed. Its cosmetic only - the correct data does go to the firewalls. Fix is slated for version 2.3.4.

Some good news for the day: The GlobalProtect 2.3.3-5 client with application content 539 (or later) seems to be the magic combination. Both VPN and HIP Checks are working properly on our OSX 10.11.1 test "victim" machines. User testing is scheduled - but so far, so good

Jason