Set Up the MDM Integration With GlobalProtect

1. Set up the GlobalProtect Infrastructure.
   1. Create Interfaces and Zones for GlobalProtect.
   2. Enable SSL Between GlobalProtect Components.
   3. Set up GlobalProtect User Authentication. Refer to About GlobalProtect User Authentication.
   4. Enable Group Mapping.
   5. Configure a GlobalProtect Gateway.
   6. Activate Licenses for each firewall running a gateway(s) that supports the GlobalProtect app on mobile endpoints.
   7. Set Up Access to the GlobalProtect Portal.
2. Set up the mobile device management system and decide whether to support only corporate-issued endpoints or both corporate-issued and personal endpoints.
   See the instructions for your mobile device management (MDM) system or enterprise mobility management (EMM) system.
3. Obtain the GlobalProtect app for mobile endpoints.
   You can install the app directly from the app store on your endpoint (see Download and Install the GlobalProtect Mobile App) or deploy the app from a mobile device management system (such as Workspace ONE) and transparently push the app to your managed endpoints.

   • App store— Download and Install the GlobalProtect Mobile App
   • Supported mobile device management systems—See the following instructions on how to deploy apps to managed endpoints:
     • Deploy the GlobalProtect Mobile App Using Workspace ONE
     • Deploy the GlobalProtect App for Android on Managed Chromebooks Using Workspace ONE
     • Deploy the GlobalProtect Mobile App Using Microsoft Intune
     • Deploy the GlobalProtect Mobile App Using MobileIron
     • Deploy the GlobalProtect App for Android on Managed Chromebooks Using the Google Admin Console
   • Other third-party mobile device management system—See the instructions from your vendor on how to deploy apps to managed endpoints.
4. Configure the MDM integration.
   Use one of the following methods to configure the MDM integration:
   • Firewall integration with an MDM or EMM system:
     • Configure Windows User-ID Agent to Collect Host Information
   • GlobalProtect app integration with an MDM or EMM system:
     • Manage the GlobalProtect App Using Workspace ONE
     • Manage the GlobalProtect App Using Microsoft Intune
     • Manage the GlobalProtect App Using MobileIron
     • Manage the GlobalProtect App Using Google Admin Console
     • Manage the GlobalProtect App Using Other Third-Party MDMs
5. Configure polices that target mobile endpoints using host information.
   Configure HIP-Based Policy Enforcement for managed endpoints.