topic Re: remote vpn on iphone and android config? in General Topics

remote vpn on iphone and android config?

chuckles — Wed, 22 May 2019 13:56:41 GMT

i successfully configured remote vpn client for windows to function but the customer is asking for vpn using mobile phones? would it work with the exist configuration? or does it need other kind of configuration? does the mobile phone pull the client from the palo alto as well?

Re: remote vpn on iphone and android config?

Mick_Ball — Wed, 22 May 2019 15:56:50 GMT

the portal and gateway config will work for all devices.

ios devices can get the client from app store.

Android can get from google apps.

the firewall does not provide the clients and you will need an extra gateway license for mobile devices such as phones and IPads

Re: remote vpn on iphone and android config?

hshawn — Wed, 22 May 2019 21:08:26 GMT

Adding to this...

You can connect to the VPN without the client but you hav eto enable Xauth support

Details:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClkhCAC

Re: remote vpn on iphone and android config?

chuckles — Thu, 23 May 2019 06:06:07 GMT

it worked! thanx but i dont understand what difference is between doing it this way and the licensed mobile devices vpn?

is xauth relieble? i dont want to get stuck in the future with alot of technical vpn issues?

Re: remote vpn on iphone and android config?

BPry — Thu, 23 May 2019 21:20:30 GMT

@chuckles,

X-Auth is generally harder to talk a user through and can break from device to device due to the different implentations that vendors utilize, so you do potentially have a bigger support overhead. You also lose out on a fair number of features that you could utilize in the GP app that you can't utilize on an X-Auth client. The GP App is also generally more secure than enabling X-Auth support.