topic iPad Global Protect Auto Connect in General Topics

iPad Global Protect Auto Connect

OGMaverick — Fri, 25 Oct 2019 17:33:49 GMT

Good morning,

GP works great on our iPads, except you need to open the app and hit 'connect'. Sometimes it becomes disconnected and needs to be done again. This is for K-12 students, so we're hoping there is actually a way to force persistence. Is this possibly a limitation that Apple has placed on iOS or maybe a config that needs changing on our side?

EDIT - We want the connection to auto establish on a reboot of the iPad

Re: iPad Global Protect Auto Connect

jdelio — Fri, 25 Oct 2019 17:31:08 GMT

The issue at hand is that the clients are timing out, and therefore they have to sign in again for the connection to be restored. This is a security related issue, as it is unsecure to have any client logged in for a long time, in case the device it stolen, etc.

But I understand why you are asking, Please let me see if there may be an option that can be tweeked to increase that time or not.

I will respond with more info when I find it.

Re: iPad Global Protect Auto Connect

OGMaverick — Fri, 25 Oct 2019 17:32:53 GMT

Thank you. I was able to get one of the student iPads to test. I can connect, but as soon as I power off then on the connection doesn't resume. I'm wondering if maybe this is a setting that the group pushing a config to the iPads needs to configure

Re: iPad Global Protect Auto Connect

jdelio — Mon, 28 Oct 2019 15:46:49 GMT

There are "Pre-Logon" options for GlobalProtect.. just need to see if they are applicable for IoS.

Re: iPad Global Protect Auto Connect

OGMaverick — Mon, 28 Oct 2019 15:48:41 GMT

We did attempt 'Pre-Logon' however when the iPad is rebooted the VPN doesn't automatically re-connect.

Re: iPad Global Protect Auto Connect

jdelio — Mon, 28 Oct 2019 15:55:25 GMT

In order to get the Pre-Logon to work properly, you need to be using Certificates for authentication.

Please see this discussion for more info about that:

https://live.paloaltonetworks.com/t5/General-Topics/GlobalProtect-5-0-for-iOS-12-and-User-Certificates/m-p/231166#M66372

I hope this helps.

joe