Issues GP in Iphones

[BigPalo]

On iPhone, the  gw for SAML authentication does not open the system browser (Safari). It opens the embedded browser. We configured the "default browser" in APP config like YES. 

In android is working fine but no in iPhones. Why? any incompatibility?

On the other hand, we have a gateway using only certificate for authentication. In android is login only with cert without asking for users or pass, but in iPhone is asking for credentials. Why?

It seems like GP and Iphones relationship not good

Anyone with same issues?

[reaper]

This should be supported (since GP 5.2, it does mention you may need to update pre-deployed settings)  but it requires an up-to-date content version and a recent GlobalProtect to work.

You could try setting up a (fresh, not  clone) profile specific to iOS/android devices to see if that changes the behavior

[BigPalo]

Hi Reaper,

Yes, we are in 6.1 GP version.

This FW only has GP gateway license. No threats & apps or any more licenses. I dont know if we need another license to use content for this,

[BigPalo]

On Android and iOS endpoints, create a VPN profile by using the supported mobile device management system (MDM) such as Workspace ONE.

• Log in to Workspace ONE UEM as an administrator.
• Select an existing VPN profile (DevicesProfiles & ResourcesProfiles) in the list.
• Select VPN to add a VPN profile.
  On Android endpoints, enter the Custom Data Key (use_default_browser_for_saml). Enter the Custom Data Value (true).
  On iOS endpoints, enter the Custom Data Key (saml-use-default-browser). Enter the Custom Data Value (true).

What if we dont have any MDM solutions? 

[reaper]

you do need to keep the base content package updated, even if there's no TP license, as it also contains other minor updates

[BigPalo]

OK but we dont have MDM. What would be the solution for IPhones?

[reaper]

The content package is downloaded and installed on the firewall, it doesnt require an mdm

Keeping the GP app updated is done via the appstore