1. Home
    2. GlobalProtect
    3. GlobalProtect App New Features Guide
    4. New Features Released in GlobalProtect App 4.1
    5. GlobalProtect App for Android Enhancements
    End-of-Life (EoL)

    GlobalProtect App for Android Enhancements

    GlobalProtect app 4.1.5 introduces enhancements for Android.
    Software Support
    : Starting with GlobalProtect™ App 4.1.5
    OS Support
    : Android 4.4 and later releases
    GlobalProtect app 4.1.5 for Android endpoints introduces the following enhancements:

    Upgrade to API Level 26

    The GlobalProtect app for Android endpoints has been upgraded from API level 24 to API level 26.

    Managed Configuration Enhancements

    If you use managed configurations to define GlobalProtect app settings remotely, you can now configure the following settings for the GlobalProtect app for Android endpoints:
    Definition
    Description
    Client Certificate Alias
    <restriction
	android:title="Client Certificate Alias"
	android:key="client_cert_alias"
	android:description="Descriptive name 
	that can help users identify and select 
	client certificates during 
	certificate-based portal or gateway 
	authentication."
	android:restrictionType="string"
	android:defaultValue=""/>
    The Client Certificate Alias is a descriptive name that can help users identify and select client certificates during certificate-based GlobalProtect portal or gateway authentication.
    Allow Network Bypass
    <restriction
		android:title="Allow Network Bypass"
		android:key="allow_nework_bypass"
		android:description="Flag to allow 
		application traffic to bypass the VPN 
		tunnel."
		android:restrictionType="bool"
		android:defaultValue="false"/>
    In GlobalProtect app 4.1.4 and earlier releases for Android endpoints, all traffic is required to traverse the VPN tunnel for inspection and policy enforcement. With the Allow Network Bypass setting, Android applications can now select which network adapter (virtual or physical) to use for their network traffic, as determined by the application manager. If an application selects the virtual network adapter, all traffic for that application goes through the VPN tunnel for inspection and policy enforcement. If an application selects the physical network adapter, all traffic for that application bypasses the VPN tunnel and proceeds directly to the physical adapter on the endpoint. By granting applications the option to bypass the VPN tunnel, you can help decrease bandwidth consumption on the GlobalProtect gateway.

    Always On VPN Notification

    If you enable
    Always-on VPN
     from a device policy controller (DPC) or end users enable
    Always-on VPN
     from their Android VPN settings (
    Settings
    More
    Network and Internet
    VPN
    ), the following notification is now displayed persistently in the Android notification tray until
    Always-on VPN
     is disabled:
    If GlobalProtect is connected when you or a user enables
    Always-on VPN
    , this notification is displayed only after the user reboots the endpoint or restarts the GlobalProtect app.
    If GlobalProtect is disconnected when you or a user disables
    Always-on VPN
    , this notification is dismissed only after the user reboots the endpoint or restarts the GlobalProtect app.

    Recommended For You

    Recommended Videos

    Recommended videos not found.

    © 2022 Palo Alto Networks, Inc. All rights reserved.

    Techdocs Logo