GlobalProtect Xauth for iPhone and Android

ZhenGuo — Wed, 12 Aug 2020 09:03:33 GMT

We have setup GlobalProtect Portal and Gateway working perfectly with SAML auth on MacBook Pro and Windows laptop.

The only issue is, GlobalProtect Mobile app is not available in our app stores. So I'm looking for setting up IPSEC Xauth on PAN so that mobile could connect to IPSEC as well.

How to set it up?

I've tried to use the current Gateway, but it said authentication failed. Do I need to setup a different Gateway for mobile devices?

Is there any successful case i could refer to?

Thanks

Re: GlobalProtect Xauth for iPhone and Android

Remo — Wed, 12 Aug 2020 12:53:19 GMT

Hi @ZhenGuo

When you want to use xauth for iPhones, you cannot use SAML authentication. I think you are restricted to local, ldap and radius or certificates. Theoretically it could work with the same gateway as you could configure different authentications for different clients/OSes. But I am not sure if this really works on the same gateway.

A dokument from the paloalto knowledgebase is old, but it still shows the requred steps for an xauth connection from iOS devices. I was not able to find it in the knowledgebase but on google search for: "GlobalProtect Configuration for IPsec Client on Apple iOS Devices"

topic GlobalProtect Xauth for iPhone and Android in General Topics

GlobalProtect Xauth for iPhone and Android

Re: GlobalProtect Xauth for iPhone and Android