Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About Vali
About Vali
Vali
Comes here often
Member since Sep 20, 2018
Jul 21 2020
Community Record
4
Posts
0
Kudos
0
Solutions
Sep 20 2018
11:58 PM
Global Protect has already have new solution -> read the article carefully https://www.paloaltonetworks.com/documentation/50/globalprotect/globalprotect-app-new-features/new-features-released-in-gp-agent-5_0/globalprotect-app-for-ios-user-experience-enhancements/mobile-device-management-changes#id12e8cc2f-9d41-4984-8644-dc71b2a6116c_id8446f2f9-179d-425d-9aa8-4b87d3f768b9 I think the problem in Meraki is the third step from the article 3. When the Identifier field appears, enter the following bundle ID to identify the new GlobalProtect app: com.paloaltonetworks.globalprotect.vpn I do not have any Identifier field within the IPSec connection type. So i guess the VPN Config can not locate the GP App. Another thing: i get a second VPN Config from VPN on the iOS Device, so i can either use the GP or the one from Meraki, but both do not work.
... View more
Sep 20 2018
8:53 AM
Well i tried IPSec and IKEv2 connection types but still no success. The problem is that iOS 12 doesn't allow anymore direct access to the phone certificates from another apps ( like Global Protect in my case ). Is there any update for Meraki Systems Manager planned to fix this issue ?
... View more
Sep 20 2018
5:00 AM
Hi Philip, the second one doesn't solve the problem and the first one too. I need to embed a certificate to the VPN Settings in Meraki as an authentication method. See here https://www.paloaltonetworks.com/documentation/50/globalprotect/globalprotect-app-new-features/new-features-released-in-gp-agent-5_0/globalprotect-app-for-ios-user-experience-enhancements/mobile-device-management-changes#id12e8cc2f-9d41-4984-8644-dc71b2a6116c I created new Profile now and suddenly have got more Connection Types ( not only L2TP ). I will try it out with IPSec and post here if i've had any luck.
... View more
Sep 20 2018
3:10 AM
Hello there, we will be experiencing a huge problem soon, if there isn't any option to directly embed a certificate to the VPN Settings of iOS Device in Meraki. We are using iOS all over the company and manage them with the Meraki Systems Manager. iOS 12 is out there and it won't work with the new version of Global Protect 5.0 ( our VPN Client) if we cannot deploy the client certificates as part of the VPN profile: "If you manage iOS endpoints using an MDM system and want to use client certificates for GlobalProtect client authentication, you must now deploy the client certificates as part of the VPN profile that is pushed from the MDM server." --> https://www.paloaltonetworks.com/documentation/50/globalprotect/globalprotect-app-new-features/new-features-released-in-gp-agent-5_0/globalprotect-app-for-ios-user-experience-enhancements We have the legacy version of Meraki. Thanks for your answers in advanced.
... View more
© 2024 Cisco Systems, Inc.
