With GlobalProtect for IoT, you can secure traffic from and extend security policy enforcement to your IoT devices. After you set up GlobalProtect for IoT, the GlobalProtect app authenticates with the GlobalProtect portal or gateways using client certificates and optionally a username and password. Upon successful authentication, the GlobalProtect app establishes an IPSec tunnel. In the event that a connection using IPSec is unsuccessful, you can configure the GlobalProtect app to fall back to an SSL tunnel. Refer to the Palo Alto Networks Compatibility Matrix for a list of features supported by OS for IoT devices.