on 02-12-201903:40 AM - last edited on 02-12-201902:17 PM by editeur
With the launch PAN-OS 9.0 comes a truckload of new features, including a fair share for GlobalProtect: GlobalProtect 5.0 Android UI/UX Overhaul, HIP Redistribution, HIP-Based Identification and Policy Enforcement for Managed and Unmanaged Device Mix, and Portal and Gateway Location Visibility for End Users.
GlobalProtect 5.0 Android UI/UX Overhaul
This feature is focused on front-end visualization changes and applies to GlobalProtect 5.0 support Android 5.0 and later.
The new client will provide a more intuitive, user-friendly and pro-active appeal aiming for better user experience and an improved error/warning system.
The look and feel of the app is updated to reflect the modern trends and the idea is to give a more fluid user-interaction.
Key features for the overhaul include color scheme improvement, layout and visibility.
GlobalProtect Splash screen
Provides a mechanism to allow GlobalProtect gateways that receive HIP reports to distribute those reports to other gateways.
The existing mechanism of User-ID redistribution can be leveraged for this feature, allowing admins to deploy HIP redistribution easily.
Panorama, Log Collectors or Firewalls can all receive and redistribute HIP reports.
HIP-Based Identification and Policy Enforcement for Managed and Unmanaged Device Mix
Support GlobalProtect Config selection criteria based on:
Attributes of the machine certificate presented by GlobalProtect client after logging in to the portal.
Serial number of the device sent by GlobalProtect client during login. The GP portal can query LDAP to check for a matching attribute defined by the admin. If it exists, consider it a managed device.
plist and registry key sent by the GP client after portal login is complete.
Gateway HIP Policy Enforcement based on:
GP client will send machine certificates that match the cert CA and template specified in the GP portal config (HIP report section).
Enhance HIP object to support match criterion of certificate attributes. HIP reports will be enhanced to show the certificate information as well.
Portal and Gateway Location Visibility for End Users
Customers with GlobalProtect gateways located in different geographical areas need to put meaningful location-based names of the gateways in the portal configuration, so that the customers know where the gateway they connect to is located.
When an end user reports issues with latency or with best gateway selection, GlobalProtect administrator wants to know the source region from which the user is connecting.