Configure a User-Initiated Remote Access VPN Configuration for iOS Endpoints Using MobileIron

In a remote access (On-Demand) VPN configuration, users must manually launch the app to establish the secure GlobalProtect connection. Traffic that matches specific filters (such as port and IP address) configured on the GlobalProtect gateway is routed through the VPN tunnel only after users initiate and establish the connection.
Use the following steps to configure a user-initiated remote access VPN configuration for iOS endpoints using MobileIron:
  1. Download the GlobalProtect app for iOS.
  2. All on-demand VPN configurations require certificate-based authentication.
    • Set the configuration type to
      VPN On Demand
      .
    • Set the
      Connection Type
      to
      Palo Alto Networks GlobalProtect
      , and then configure the associated settings.

Related Documentation