iPad Global Protect Auto Connect

[OGMaverick]

Good morning,

GP works great on our iPads, except you need to open the app and hit 'connect'.  Sometimes it becomes disconnected and needs to be done again.  This is for K-12 students, so we're hoping there is actually a way to force persistence.  Is this possibly a limitation that Apple has placed on iOS or maybe a config that needs changing on our side?

EDIT - We want the connection to auto establish on a reboot of the iPad

[jdelio]

The issue at hand is that the clients are timing out, and therefore they have to sign in again for the connection to be restored.  This is a security related issue, as it is unsecure to have any client logged in for a long time, in case the device it stolen, etc. 

But I understand why you are asking, Please let me see if there may be an option that can be tweeked to increase that time or not.

I will respond with more info when I find it.

[OGMaverick]

Thank you.  I was able to get one of the student iPads to test.  I can connect, but as soon as I power off then on the connection doesn't resume.  I'm wondering if maybe this is a setting that the group pushing a config to the iPads needs to configure

[jdelio]

There are "Pre-Logon" options for GlobalProtect.. just need to see if they are applicable for IoS.

[OGMaverick]

We did attempt 'Pre-Logon' however when the iPad is rebooted the VPN doesn't automatically re-connect.

[jdelio]

In order to get the Pre-Logon to work properly, you need to be using Certificates for authentication.

Please see this discussion for more info about that:

https://live.paloaltonetworks.com/t5/General-Topics/GlobalProtect-5-0-for-iOS-12-and-User-Certificat...

I hope this helps.

joe