Global protect configuration on Ipad and Iphone devices and Firewall configuration

[sebastian.rincon]

Hi all, I have been consulting with TAC to configure Global protect for IOS devices (ipad, iphone), I use the same certificate that we use for PCs and it works correctly on PCs but on ipad and Iphone it does not work.
I would like to ask if anyone knows how to configure this, what should I take into account in these configurations, or any KB that has worked to configure global protect with ipad and iphone recently, thanks.

[Mick_Ball]

Can you post the process you are using to configure GP with cert auth on IOS?

[harrellbr]

Has there been any info on this yet. We have the same issue

[sebastian.rincon · Accepted solution]

A specific one for IOS with the "On demand" connection method has been added in the portal agent.
1- In the Firewall go to Device > Certificates
2- Select the certificate associated to the portal.
3- Export the certificate in "Base 64 encoded".
4- Once the certificate is downloaded, save it in the Files section of the IOS device, in this case in Downloads.
5- With the certificate already located in the device, give it "a touch" where the following will appear:
"Profile downloaded , Review the profile in the settings app if you want to install it".
6- Close
7- Settings > Profile downloaded >Install > Enter phone Passcode > Install > Install > Install >
Done
8- Back > General > About > Certificate Trust Settings > Enable Full trust for root certificates >
Continue
9- Go to General > VPN & Device Management > Configuration profile and verify the installed portal
installed
10 - Login to the global protect app downloaded from the APPstore > Enter gateway address >