OS support: Windows operating systems (requires registry key changes)
OS Support: The GlobalProtect app for Android now supports SAML single sign-on (SSO) for Chromebooks.
Software Support: Starting with GlobalProtect™ app 5.1 and PAN-OS 9.1
GlobalProtect for macOS supports both the use of PAC files and manual proxy configuration. This enables you to deploy GlobalProtect on macOS endpoints that do not have a direct internet connection and that route traffic through a proxy server. The GlobalProtect app can now automatically detect and inherit proxy settings on macOS endpoints. OS Support: Linux operating systems with graphic interface support (but supported on Ubuntu 18.04 only). Software Support: Starting with GlobalProtect™ app 5.1 To view latency information, filter for it in the GlobalProtect Logs (Monitor > Logs > GlobalProtect) on PAN-OS 9.1 and later releases. With this information, you can easily identify the gateway to which the user is connected, the current stage of the connection, and statistics about the pre-tunnel and post-tunnel network latency. To help you troubleshoot connection and performance issues for a specific user, GlobalProtect now collects and reports telemetry information for latency between the GlobalProtect gateway and the endpoint.
After you set up GlobalProtect for IoT, the GlobalProtect app authenticates with the GlobalProtect portal or gateways using client certificates and optionally a username and password and establishes an IPSec tunnel. With GlobalProtect for IoT, you can secure traffic from and extend security policy enforcement to your IoT devices. OS Support: IoT operating systems-Android, Raspbian, Ubuntu, or Windows IoT Enterprise
To support host information for IoT, you must also use Content Release version 8196-5685 or later Software Support: Starting with GlobalProtect™ app 5.1 and PAN-OS 9.1. This allows a user to access to a local network segment or broadcast domain. For example when GlobalProtect is not connected, GlobalProtect can allow access to link-local addresses. By configuring exclusions, you can improve the user experience by allowing users to access local resources when GlobalProtect is disconnected. You can now configure exclusions for specific local IP addresses or network segments when you enforce GlobalProtect for network access. Software Support: Starting with GlobalProtect™ app 5.1 with Content Release version 8196-5685 GlobalProtect does not store the fingerprint or facial template used for authentication, but relies on the operating system scanning capabilities to determine the validity of a scan match. On iOS X, GlobalProtect also supports facial recognition with Face ID. When biometric sign-on is enabled on an endpoint, end users must supply a fingerprint that matches a trusted fingerprint template on the endpoint to use a saved password for authentication to GlobalProtect portal and gateways. OS Support: Fingerprint support on Windows, macOS, iOS, and Android Face ID support on iOS X and later releases only.įor enhanced usability, GlobalProtect now supports biometric sign-in. Software Support: Starting with GlobalProtect™ app 5.1 with PAN-OS 9.1 GlobalProtect app 5.1 introduces new features Got questions? Get answers on LIVEcommunity! See what's new and how it can help to keep your network secure. Palo Alto Networks releases new features in GlobalProtect app 5.1 that include several content release versions.