Use the GlobalProtect App for iOS (2024)

Connect to the GlobalProtect portal or gateway.

Use one of the following workflows to connect to the GlobalProtectportal or gateway:

First time connection experience:

Launchthe GlobalProtect app.

(

Optional

) If you have not enabled GlobalProtectnotifications on your endpoint, a notification permission dialogappears.

Allow

GlobalProtect to send younotifications.



If you

Don’tAllow

GlobalProtect to send you notifications, a reminderappears the next time you launch the app. Tap the

Settings-> GlobalProtect

link to go to the notification permissionscreen, where you can enable notifications. If you still do notwant to enable notifications,

Skip

this screen.



Enter the GlobalProtect portal address.



(

Optional

See Also

Download and Install the GlobalProtect App for WindowsUse the GlobalProtect App for Windows

) Depending on the connection mode, tap

Connect

toinitiate the connection.

When the

“GlobalProtect” Would Like to AddVPN Configurations

messageappears, use the following steps to add VPN configurations to yourendpoint:

Allow

GlobalProtectto add VPN configurations to your endpoint. This setting enablesGlobalProtect to filter and monitor network activity on the endpointwhen you are using the VPN.



Enter your iPhone or iPad passcode to confirm that you wantto add VPN configurations to your endpoint.



(

Optional

) If your endpoint is unable to verifythe identity of the GlobalProtect portal using the portal servercertificate, the

Cannot Verify Server Identity

message appears.If you trust the certificate, tap

Continue

to proceedwith the connection.

(

Optional

) If prompted, enter your

Username

and

Password

andthen

SIGN IN

.

If your administratorhas allowed you to use biometric (fingerprint or, for iOS X devicesonly, face ID) information to sign in, you need to first sign-inwith a username and password twice (once to save it and again toauthenticate); you can then use biometric information to sign in.



(

Optional

) If you are using multi-factor authentication,enter the GlobalProtect verification

Code

thatis sent to your endpoint after you sign in, and then tap

Continue

.

(

Optional

) If your administrator configures theGlobalProtect app to display a welcome message, the welcome messageappears upon successful connection. Close the welcome message toproceed to the home screen.



(

Optional

) If there are notifications on your app,the Notifications dialog appears upon successful connection. Closethe Notifications dialog to proceed to the home screen.



When the home screen appears, verify that your connectionhas established successfully. If the connection is successful, thehome screen displays the

CONNECTED

state.



(

Optional

) By default, the endpoint automaticallyconnects to the

Best Available

gateway basedon the configuration that the administrator defines and the responsetimes of the available gateways. To connect to a different gateway,tap the gateway drop-down at the bottom of the home screen and thenuse one of the following options:

Select a gatewaymanually (external gateways only). If your administrator configuresmore than 10 manual external gateways in your portal agent configuration,you can also locate a specific gateway using the gateway search option.



Assign and automatically connect to a preferred gateway by tappingthe More Options (



) iconfor the gateway that you want to set as the preferred gateway andthen

Set As Preferred

. Alternatively, youcan long-press (tap and hold) the gateway and then

SetAs Preferred

.



To removethe preferred gateway assignment, tap the More Options (



) icon for the preferredgateway and then

Remove Preferred

. Alternatively,you can long-press (tap and hold) the gateway and then

RemovePreferred

.



On-Demand (Remote Access VPN) connection experience:

WhenGlobalProtect administrator configures GlobalProtect with the

On-Demand

connectmethod, you must launch the GlobalProtect app to initiate the connectionmanually. After the connection initiates, you can

TAPTO CONNECT

to establish the GlobalProtect connection.If your administrator enables GlobalProtect to

Save User Credentials

,the connection establishes without requiring further user interaction.If your administrator does not enable GlobalProtect to

SaveUser Credentials

, you must sign in to establish the connection.



Always On connection experience

When your GlobalProtectadministrator configures GlobalProtect with the

AlwaysOn

connect method, the connection initiates automatically.Depending on whether your administrator configures the GlobalProtect appto

Save User Credentials

, you can establishthe GlobalProtect connection without launching the app. If youradministrator enables GlobalProtect to

Save User Credentials

,the connection establishes automatically without requiring any userinteraction. If your administrator does not enable GlobalProtectto

Save User Credentials

, you must sign inthrough the app to establish the connection.

View information about your GlobalProtect connection.

After you establish the GlobalProtect connection, launchthe GlobalProtect app. Tap the settings icon to open the settingsmenu. From the settings menu, tap

SETTINGS

toview information about your connection, including the

Portal

addressand connection

Status

.

If you want to connect to a different GlobalProtectportal, tap the

Portal

address. When prompted,enter a new portal address and then tap

CONNECT

.

If you are connected to an external gateway, tap the connection

Status

toview additional details about your connection (including the networkSSID and gateway IP address/FQDN).



(

Optional

) Change your saved password.

If your GlobalProtect administrator configures the GlobalProtectportal agent to

Save User Credentials

, yourcredentials are automatically saved to the GlobalProtect app. Whenyour password expires or a RADIUS or AD administrator requires apassword change at the next login, you can update your passwordon the app. This feature is enabled only when you are authenticatedwith a RADIUS server using the Protected Extensible AuthenticationProtocol Microsoft Challenge Handshake Authentication Protocol version2 (PEAP-MSCHAPv2).

Launch the GlobalProtect app.

From the home screen,

TAP TO CONNECT

.

(

Optional

) If prompted, enter your

old

Username

and

Password

,and then

SIGN IN

.



When the GlobalProtect app prompts you to

Update Password

,enter your

Current Password

followed by your

NewPassword

.



Retype Password

to confirmyour new password.

SIGN IN

to reconnect to GlobalProtect withyour new password.

(

Optional

) Disconnect from GlobalProtect.

If your administrator configures GlobalProtect with the

On-Demand

connectmethod, you can

TAP TO DISCONNECT

from thehome screen.

{{ } else { }}