End-of-Life (EoL)

GlobalProtect App for Android Enhancements

GlobalProtect app 4.1.5 introduces enhancements for Android.
Software Support
: Starting with GlobalProtect™ App 4.1.5
OS Support
: Android 4.4 and later releases
GlobalProtect app 4.1.5 for Android endpoints introduces the following enhancements:

Upgrade to API Level 26

The GlobalProtect app for Android endpoints has been upgraded from API level 24 to API level 26.

Managed Configuration Enhancements

If you use managed configurations to define GlobalProtect app settings remotely, you can now configure the following settings for the GlobalProtect app for Android endpoints:
Definition
Description
Client Certificate Alias
<restriction android:title="Client Certificate Alias" android:key="client_cert_alias" android:description="Descriptive name that can help users identify and select client certificates during certificate-based portal or gateway authentication." android:restrictionType="string" android:defaultValue=""/>
The Client Certificate Alias is a descriptive name that can help users identify and select client certificates during certificate-based GlobalProtect portal or gateway authentication.
Allow Network Bypass
<restriction android:title="Allow Network Bypass" android:key="allow_nework_bypass" android:description="Flag to allow application traffic to bypass the VPN tunnel." android:restrictionType="bool" android:defaultValue="false"/>
In GlobalProtect app 4.1.4 and earlier releases for Android endpoints, all traffic is required to traverse the VPN tunnel for inspection and policy enforcement. With the Allow Network Bypass setting, Android applications can now select which network adapter (virtual or physical) to use for their network traffic, as determined by the application manager. If an application selects the virtual network adapter, all traffic for that application goes through the VPN tunnel for inspection and policy enforcement. If an application selects the physical network adapter, all traffic for that application bypasses the VPN tunnel and proceeds directly to the physical adapter on the endpoint. By granting applications the option to bypass the VPN tunnel, you can help decrease bandwidth consumption on the GlobalProtect gateway.

Always On VPN Notification

If you enable
Always-on VPN
from a device policy controller (DPC) or end users enable
Always-on VPN
from their Android VPN settings (
Settings
More
Network and Internet
VPN
), the following notification is now displayed persistently in the Android notification tray until
Always-on VPN
is disabled:
If GlobalProtect is connected when you or a user enables
Always-on VPN
, this notification is displayed only after the user reboots the endpoint or restarts the GlobalProtect app.
If GlobalProtect is disconnected when you or a user disables
Always-on VPN
, this notification is dismissed only after the user reboots the endpoint or restarts the GlobalProtect app.

Recommended For You