What Features Does GlobalProtect Support?
The following table lists the features supported on
GlobalProtect by OS. An entry in the table indicates the first supported
release of the feature on the OS. A – indicates the feature is not
supported. For recommended minimum GlobalProtect app versions, see
What
OS Versions are Supported with GlobalProtect?
in the GlobalProtect
Administrator’s Guide for your PAN-OS version.Feature | Android | iOS | Chrome | Windows | Windows 10 UWP | Mac | Linux |
|---|---|---|---|---|---|---|---|
Authentication | |||||||
4.1.0 | 4.1.0 (notifications only) 5.0.0 (full support) | 4.1.0 | 4.1.0 | 4.1.0 | 4.1.0 | – | |
4.1.0 | 4.1.0 | 4.1.0 | 4.1.0 | 4.1.0 | 4.1.0 | 4.1.0 | |
Single Sign-On (SSO) | |||||||
SSO (Credential Provider) | – | – | – | 1.2.0 | – | – | – |
VPN Connections | |||||||
IPSec | 1.3.0 | 1.3.0 | 3.1.1 | 1.0.0 | – | 1.0.0 | 4.1.0 |
SSL | 1.3.0 | 1.3.0 | 3.1.1 | 1.0.0 | 3.1.3 | 1.0.0 | 4.1.0 |
– (no client required) | – (no client required) | – (no client required) | – (no client required) | – (no client required) | – (no client required) | – (no client required) | |
Connect Methods | |||||||
User-logon (always on) | 1.3.0 | 1.3.0 | 5.0.0 (through extended support for
the GlobalProtect app for Android) | 1.0.0 | 3.1.3 (Always On configured from third-party MDM) | 1.0.0 | 4.1.0 |
Pre-logon (always-on) | – | – | – | 1.1.0 | – | 1.1.0 | – |
On-demand | 1.3.0 | 1.3.0 | 3.1.1 | 1.0.0 | 3.1.3 | 1.0.0 | 4.1.0 |
Connection Priority | |||||||
4.0.0 (Except DHCP options) | 4.0.0 (Except DHCP options) | – | 4.0.0 | – | 4.0.0 | 4.1.0 | |
Modes | |||||||
Internal mode | 1.3.0 | 1.3.0 | – | 1.0.0 | – | 1.0.0 | 4.1 |
External mode | 1.3.0 | 1.3.0 | 3.1.1 | 1.0.0 | 3.1.3 | 1.0.0 | 4.1 |
Networking | |||||||
IPv4 Addressing | 1.3.0 | 1.3.0 | 3.1.1 | 1.0.0 | 3.1.3 | 1.0.0 | 4.1 |
Customization | |||||||
4.1.0 | 4.1.0 | 4.1.0 | 4.1.0 | 4.1.0 | 4.1.0 | 4.1.0 | |
4.1.0 | 4.1.0 | 4.1.0 | 4.1.0 | 4.1.0 | 4.1.0 | 4.1.0 | |
Pre-logon tunnel rename timeout | – | – | – | 4.0.2 | – | – | – |
– | – | – | 3.1.0 | 3.1.3 (VPN Lockdown configured from third-party MDM) | 3.1.0 | – | |
Deployment of SSL Forward Proxy CA certificates
in the trust store | – | – | – | 3.0.0 | – | 3.0.0 | – |
HIP reports | 1.3.0 | 1.3.0 | 3.0.0 | 1.0.0 | 3.1.3 (Host information only; Notifications
not supported) | 1.0.0 | 4.1.0 (Host information only) |
Run scripts before and after sessions | – | – | – | 2.3.0 | – | 2.3.0 | – |
Allow users to disable GlobalProtect | – | – | – | 2.2.0 | – | 2.2.0 | 4.1.0 |
Welcome and help pages | 1.3.0 | 1.3.0 | 3.0.0 | 1.0.0 | – | 1.0.0 | – |
Other | |||||||
Automatic VPN Reconnect for Chromebooks | – | – | 4.1.0 | – | – | – | – |