GlobalProtect for iOS and Intune data attributes

[CKobelsky]

Hello everyone!  I'm currently working on setting up GlobalProtect and having it send appropriate HIP data to the firewall.  I got Windows devices working pretty well, but I'm struggling with iOS devices that are managed by Intune

According to https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/mobile-endpoint-management/... there are 4 attributes that are supported by GlobalProtect, but I can't figure out how to get GlobalProtect to send this info to the firewall

I went through and configured Intune to send a VPN configuration (https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/mobile-endpoint-management/...) and it installs fine, but the HIP data does not contain the 4 attributes.  I'm running the latest GlobalProtect client on iOS (6.0.5) and the firewalls are running PAN-OS 10.2.3.

Does anybody know how to make this work?  I'm sure I'm just missing a step someplace

[Ken_Carvel]

Was there a solution for this?

Thanks,
Ken

[CKobelsky]

Ends up it is basically not supported.  In Intune you can configure the VPN policy to send out the attributes but they are static.  So in the end it wasn't useful at all.  If you use AirWatch (Vmware ONE or something) it works much better apparently.