You can deploy the GlobalProtect app to managed
endpoints that are enrolled with Microsoft Intune or to users whose
endpoints are not enrolled with Microsoft Intune (iOS only). After
you deploy the app, configure and deploy a VPN profile to managed
endpoints to set up the GlobalProtect app for end users automatically.