GlobalProtect v6.3 on Android

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Scheduled Maintenance: November 14–15 (starting Nov. 14 at 12:00 AM PST)
LIVEcommunity will temporarily operate in read-only mode as we prepare to welcome Idira!
Public content will remain accessible, but log-ins, posting and community interactions will be paused during this period. Thank you for your patience!

GlobalProtect v6.3 on Android

L1 Bithead

Hi,

 

When attempting to download the GlobalProtect App from the Google Play Store, the default version hosted in the store is 6.3.5. This is in direct contradiction to the compatibility matrix, which suggests Android only supports up to GlobalProtect v6.
Where Can I Install the GlobalProtect App?

 

As such, upon installing the App, users encounter Client certificate issues that are not present on 6.1, assuming this is because 6.3 is not supported. If so, then why is 6.3 the default version on the Play Store? Why do we need to install GlobalProtect 6.1 via a custom APK just for it to work, or is there another recommended process?

 

The installation guides are devoid of any advice for installing GlobalProtect beyond 6.1 (GlobalProtect App for Android), so I am assuming the published version in the App Store is incorrect. Can you confirm this, please?

 

Many thanks,

5 REPLIES 5

Cyber Elite

What is the Android version in the phone?

Principal Architect @ Cloud Carib Ltd
Palo Alto Networks certified from 2011

Hi Raido,

 

Both Android 15 & 16 have been tested.

 

Thanks.

Cyber Elite

@CBoydenEXN,

I'm not shocked to see the compatibility matrix lagging behind what is actually being pushed out. 6.3.5 is correct if you are just downloading straight from Google, but it also brings about stricter certificate requirements than what older versions did. Unlike in 6.1, GlobalProtect 6.3 will strictly enforce full-chain verification which is a major departure from what they were doing previously.

You will need to either keep deploying 6.1 manually until it is no longer supported, or you will need to validate and fix your chain trust issue. If your service profile you're using for GlobalProtect doesn't actively bundle the intermediate and root bundle Android will have issues with 6.3. You wouldn't notice this issue on Windows or macOS since these will by default go out and fetch the missing chain certificates. 

Hi BPry,

 

Appreciate the suggestion. But, we've been able to confirm the full chain is installed onto the Android devices.

Cyber Elite

Is your GlobalProtect portal/gateway sending full chain?

Principal Architect @ Cloud Carib Ltd
Palo Alto Networks certified from 2011
  • 314 Views
  • 5 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!