Configure a Device-Level VPN Configuration for iOS Devices Using AirWatch

Download the GlobalProtect app for iOS.
Deploy the GlobalProtect Mobile App Using AirWatch.
Download the GlobalProtect app directly from the App Store.
From the AirWatch console, modify or add a new Apple iOS profile.
Navigate to
Devices
Profiles
List View
.
Select an existing profile to add the VPN configuration to it or add a new one (select
Add
Apple iOS)
.
Configure
General
profile settings:
Description
—A brief description of the profile that indicates its purpose.
Deployment
—Determines if the profile will be automatically removed upon unenrollment, either
Managed
(the profile is removed) or
Manual
(the profile remains installed until removed by the end user).
Assignment Type
—Determines how the profile is deployed to endpoints. Select
Auto
to deploy the profile to all endpoints automatically,
Optional
to enable the end user to install the profile from the Self-Service Portal (SSP) or to manually deploy the profile to individual endpoints, or
Compliance
to deploy the profile when an end user violates a compliance policy applicable to the endpoint.
Managed By
—The Organization Group with administrative access to the profile.
Assigned Smart Group
—The Smart Group to which you want the device profile added. Includes an option to create a new Smart Group which can be configured with specs for minimum OS, device models, ownership categories, organization groups and more.
Allow Removal
—Determines whether or not the profile can be removed by the endpoint's end user. Select
Always
to enable the end user to manually remove the profile at any time,
Never
to prevent the end user from removing the profile from the endpoint, or
With Authorization
to enable the end user to remove the profile with the authorization of the administrator. Choosing
With Authorization
adds a required Password.
Exclusions
—If
Yes
is selected, a new field
Excluded Smart Groups
displays, enabling you to select those Smart Groups you wish to exclude from the assignment of this device profile.
To configure the VPN settings, select
VPN
and then click
Configure
.
Configure connection information, including:
Connection Name
—Enter the name of the connection name to be displayed.
Connection Type
—Select
Palo Alto Networks GlobalProtect
as the network connection method.
Server
—Enter the hostname or IP address of the GlobalProtect portal to which to connect.
Account
—Enter the username of the VPN account or click add ( “
+
” ) to view supported lookup values you can insert.
Authentication
—Choose the method to authenticate end users. Follow the related prompts to enter a
Password
or upload an
Identity Certificate
to use to authenticate users; Or, if you selected
Password + Certificate
, follow the related prompts for both.
Save & Publish
your changes.