After deploying the GlobalProtect app, you can set up VPN configurations for Android
endpoints using Workspace ONE.
Where Can I Use This?
What Do I Need?
NGFW (managed by Panorama or Strata Cloud Manager)
Prisma Access (managed by Panorama or Strata Cloud Manager)
GlobalProtect Gateway license or Prisma Access license with the
Mobile User subscription
GlobalProtect app can be deployed and configured using Workspace ONE to provide managed
mobile endpoints with secure access to internal corporate resources. This integration
supports the configuration of per-app VPN policies, which granularly control tunneling
behavior. When a per-app policy is active, only traffic from explicitly defined managed
applications is sent through the GlobalProtect VPN tunnel. All other traffic from
unmanaged applications connects directly to the internet, bypassing the secure
tunnel.
Refer to the following sections for information on how to set up VPN configurations for
Android endpoints using Workspace ONE:
