Alto BEXT 100H Podręcznik Użytkownika

Palo Alto Networks®GlobalProtect Administrator’s GuideVersion 6.0

4 GlobalProtect Administrator’s GuideAbout the GlobalProtect Components GlobalProtect OverviewGlobalProtect Mobile Security ManagerThe GlobalProtect

94 GlobalProtect Administrator’s GuideDefine Deployment Policies Set Up the GlobalProtect Mobile Security ManagerDefine a GlobalProtect VPN Configur

GlobalProtect Administrator’s Guide 95Set Up the GlobalProtect Mobile Security Manager Define Deployment Policies Step 3 Specify how to populate the

96 GlobalProtect Administrator’s GuideDefine Deployment Policies Set Up the GlobalProtect Mobile Security ManagerCreate an Android Configuration Pro

GlobalProtect Administrator’s Guide 97Set Up the GlobalProtect Mobile Security Manager Define Deployment Policies Step 3 Specify passcode requirement

98 GlobalProtect Administrator’s GuideDefine Deployment Policies Set Up the GlobalProtect Mobile Security ManagerStep 5 Provide configuration settin

GlobalProtect Administrator’s Guide 99Set Up the GlobalProtect Mobile Security Manager Define Deployment Policies Import an iOS Provisioning ProfileT

100 GlobalProtect Administrator’s GuideDefine Deployment Policies Set Up the GlobalProtect Mobile Security ManagerStep 2 Specify the type of challen

GlobalProtect Administrator’s Guide 101Set Up the GlobalProtect Mobile Security Manager Define Deployment Policies Create Deployment PoliciesAfter a

102 GlobalProtect Administrator’s GuideDefine Deployment Policies Set Up the GlobalProtect Mobile Security ManagerCreate Deployment PoliciesStep 1 C

GlobalProtect Administrator’s Guide 103Set Up the GlobalProtect Mobile Security Manager Define Deployment Policies Step 4 Arrange the deployment poli

GlobalProtect Administrator’s Guide 5GlobalProtect Overview What Client OS Version are Supported with GlobalProtect? What Client OS Version are Suppo

104 GlobalProtect Administrator’s GuideVerify the Mobile Security Manager Configuration Set Up the GlobalProtect Mobile Security ManagerVerify the M

GlobalProtect Administrator’s Guide 105Set Up the GlobalProtect Mobile Security Manager Verify the Mobile Security Manager Configuration Step 3 Enrol

106 GlobalProtect Administrator’s GuideVerify the Mobile Security Manager Configuration Set Up the GlobalProtect Mobile Security ManagerStep 5 From

GlobalProtect Administrator’s Guide 107Set Up the GlobalProtect Mobile Security Manager Set Up Administrative Access to the Mobile Security Manager S

108 GlobalProtect Administrator’s GuideSet Up Administrative Access to the Mobile Security Manager Set Up the GlobalProtect Mobile Security Manager

GlobalProtect Administrator’s Guide 109Set Up the GlobalProtect Mobile Security Manager Set Up Administrative Access to the Mobile Security Manager S

110 GlobalProtect Administrator’s GuideSet Up Administrative Access to the Mobile Security Manager Set Up the GlobalProtect Mobile Security ManagerE

GlobalProtect Administrator’s Guide 111Set Up the GlobalProtect Mobile Security Manager Set Up Administrative Access to the Mobile Security Manager C

112 GlobalProtect Administrator’s GuideSet Up Administrative Access to the Mobile Security Manager Set Up the GlobalProtect Mobile Security ManagerC

GlobalProtect Administrator’s Guide 113Set Up the GlobalProtect Mobile Security Manager Set Up Administrative Access to the Mobile Security Manager S

6 GlobalProtect Administrator’s GuideAbout GlobalProtect Licenses GlobalProtect OverviewAbout GlobalProtect LicensesIf you simply want to use Global

114 GlobalProtect Administrator’s GuideSet Up Administrative Access to the Mobile Security Manager Set Up the GlobalProtect Mobile Security Manager

GlobalProtect Administrator’s Guide 115Manage Mobile DevicesAfter your mobile device users enroll with the GlobalProtect Mobile Security Manager, you

116 GlobalProtect Administrator’s GuideGroup Devices by Tag for Simplified Device Administration Manage Mobile DevicesGroup Devices by Tag for Simpl

GlobalProtect Administrator’s Guide 117Manage Mobile Devices Group Devices by Tag for Simplified Device Administration Pre-Tag DevicesTo simplify adm

118 GlobalProtect Administrator’s GuideGroup Devices by Tag for Simplified Device Administration Manage Mobile DevicesStep 2 Import the device list.

GlobalProtect Administrator’s Guide 119Manage Mobile Devices Monitor Mobile Devices Monitor Mobile DevicesOne of the problems with allowing mobile de

120 GlobalProtect Administrator’s GuideMonitor Mobile Devices Manage Mobile Devices• Monitor the MDM logs for a information on device activities, s

GlobalProtect Administrator’s Guide 121Manage Mobile Devices Monitor Mobile Devices • Monitor the HIP Match logs on the Mobile Security ManagerFrom

122 GlobalProtect Administrator’s GuideMonitor Mobile Devices Manage Mobile Devices• Monitor the ACC on the firewall hosting the GlobalProtect gate

GlobalProtect Administrator’s Guide 123Manage Mobile Devices Administer Remote Devices Administer Remote DevicesOne of the most powerful features of

GlobalProtect Administrator’s Guide 7Set Up the GlobalProtect InfrastructureIn order for GlobalProtect to work, you must set up the basic infrastructu

124 GlobalProtect Administrator’s GuideAdminister Remote Devices Manage Mobile DevicesTake Action on a Lost or Stolen DeviceIf an end user reports t

GlobalProtect Administrator’s Guide 125Manage Mobile Devices Administer Remote Devices Remove DevicesAlthough end users can manually unenroll from Gl

126 GlobalProtect Administrator’s GuideCreate Security Policies for Mobile Device Traffic Enforcement Manage Mobile DevicesCreate Security Policies

GlobalProtect Administrator’s Guide 127Manage Mobile Devices Create Security Policies for Mobile Device Traffic Enforcement Step 2 (Optional) On the

128 GlobalProtect Administrator’s GuideCreate Security Policies for Mobile Device Traffic Enforcement Manage Mobile Devices

GlobalProtect Administrator’s Guide 129Use Host Information in Policy EnforcementAlthough you may have stringent security at your corporate network bo

130 GlobalProtect Administrator’s GuideAbout Host Information Use Host Information in Policy EnforcementAbout Host InformationOne of the jobs of the

GlobalProtect Administrator’s Guide 131Use Host Information in Policy Enforcement About Host Information You can also exclude certain categories of i

132 GlobalProtect Administrator’s GuideAbout Host Information Use Host Information in Policy EnforcementHow Does the Gateway Use the Host Informatio

GlobalProtect Administrator’s Guide 133Use Host Information in Policy Enforcement About Host Information  You create a HIP profile that matches if t

8 GlobalProtect Administrator’s GuideCreate Interfaces and Zones for GlobalProtect Set Up the GlobalProtect InfrastructureCreate Interfaces and Zone

134 GlobalProtect Administrator’s GuideConfigure HIP-Based Policy Enforcement Use Host Information in Policy EnforcementConfigure HIP-Based Policy E

GlobalProtect Administrator’s Guide 135Use Host Information in Policy Enforcement Configure HIP-Based Policy Enforcement Step 3 (Optional) Exclude ca

136 GlobalProtect Administrator’s GuideConfigure HIP-Based Policy Enforcement Use Host Information in Policy EnforcementStep 4 Create the HIP object

GlobalProtect Administrator’s Guide 137Use Host Information in Policy Enforcement Configure HIP-Based Policy Enforcement Step 5 Create the HIP profil

138 GlobalProtect Administrator’s GuideConfigure HIP-Based Policy Enforcement Use Host Information in Policy EnforcementStep 6 Verify that the HIP o

GlobalProtect Administrator’s Guide 139Use Host Information in Policy Enforcement Configure HIP-Based Policy Enforcement Step 9 Create the HIP-enable

140 GlobalProtect Administrator’s GuideConfigure HIP-Based Policy Enforcement Use Host Information in Policy EnforcementStep 10 Define the notificat

GlobalProtect Administrator’s Guide 141Use Host Information in Policy Enforcement Configure HIP-Based Policy Enforcement Step 11 Verify that your HIP

142 GlobalProtect Administrator’s GuideConfigure HIP-Based Policy Enforcement Use Host Information in Policy Enforcement

GlobalProtect Administrator’s Guide 143GlobalProtect Quick ConfigsThe following sections provide step-by-step instructions for configuring some common

GlobalProtect Administrator’s Guide 9Set Up the GlobalProtect Infrastructure Create Interfaces and Zones for GlobalProtect Step 2 On the firewall(s)

144 GlobalProtect Administrator’s GuideRemote Access VPN (Authentication Profile) GlobalProtect Quick ConfigsRemote Access VPN (Authentication Profi

GlobalProtect Administrator’s Guide 145GlobalProtect Quick Configs Remote Access VPN (Authentication Profile) Step 2 Create security policy to enable

146 GlobalProtect Administrator’s GuideRemote Access VPN (Authentication Profile) GlobalProtect Quick ConfigsStep 5 Create an authentication profile

GlobalProtect Administrator’s Guide 147GlobalProtect Quick Configs Remote Access VPN (Certificate Profile) Remote Access VPN (Certificate Profile)Whe

148 GlobalProtect Administrator’s GuideRemote Access VPN (Certificate Profile) GlobalProtect Quick ConfigsStep 2 Create security policy to enable tr

GlobalProtect Administrator’s Guide 149GlobalProtect Quick Configs Remote Access VPN (Certificate Profile) Step 7 Configure the GlobalProtect Portal.

150 GlobalProtect Administrator’s GuideRemote Access VPN with Two-Factor Authentication GlobalProtect Quick ConfigsRemote Access VPN with Two-Factor

GlobalProtect Administrator’s Guide 151GlobalProtect Quick Configs Remote Access VPN with Two-Factor Authentication Quick Config: VPN Remote Access w

152 GlobalProtect Administrator’s GuideRemote Access VPN with Two-Factor Authentication GlobalProtect Quick ConfigsStep 5 Create a client certificat

GlobalProtect Administrator’s Guide 153GlobalProtect Quick Configs Remote Access VPN with Two-Factor Authentication Step 8 Configure a GlobalProtect

10 GlobalProtect Administrator’s GuideEnable SSL Between GlobalProtect Components Set Up the GlobalProtect InfrastructureEnable SSL Between GlobalPr

154 GlobalProtect Administrator’s GuideAlways On VPN Configuration GlobalProtect Quick ConfigsAlways On VPN ConfigurationIn an “always on” GlobalPro

GlobalProtect Administrator’s Guide 155GlobalProtect Quick Configs Remote Access VPN with Pre-Logon Remote Access VPN with Pre-LogonThe GlobalProtect

156 GlobalProtect Administrator’s GuideRemote Access VPN with Pre-Logon GlobalProtect Quick ConfigsThis example uses the GlobalProtect topology show

GlobalProtect Administrator’s Guide 157GlobalProtect Quick Configs Remote Access VPN with Pre-Logon Step 5 Import the trusted root CA certificate fro

158 GlobalProtect Administrator’s GuideRemote Access VPN with Pre-Logon GlobalProtect Quick ConfigsStep 8 Configure the GlobalProtect Portal.For thi

GlobalProtect Administrator’s Guide 159GlobalProtect Quick Configs GlobalProtect Multiple Gateway Configuration GlobalProtect Multiple Gateway Config

160 GlobalProtect Administrator’s GuideGlobalProtect Multiple Gateway Configuration GlobalProtect Quick ConfigsQuick Config: GlobalProtect Multiple

GlobalProtect Administrator’s Guide 161GlobalProtect Quick Configs GlobalProtect Multiple Gateway Configuration Step 4 Obtain server certificates for

162 GlobalProtect Administrator’s GuideGlobalProtect Multiple Gateway Configuration GlobalProtect Quick ConfigsStep 7 Configure the GlobalProtect Po

GlobalProtect Administrator’s Guide 163GlobalProtect Quick Configs GlobalProtect for Internal HIP Checking and User-Based Access GlobalProtect for In

GlobalProtect Administrator’s Guide 11Set Up the GlobalProtect Infrastructure Enable SSL Between GlobalProtect Components Table: GlobalProtect Certif

164 GlobalProtect Administrator’s GuideGlobalProtect for Internal HIP Checking and User-Based Access GlobalProtect Quick ConfigsQuick Config: Global

GlobalProtect Administrator’s Guide 165GlobalProtect Quick Configs GlobalProtect for Internal HIP Checking and User-Based Access Step 4 Define how yo

166 GlobalProtect Administrator’s GuideGlobalProtect for Internal HIP Checking and User-Based Access GlobalProtect Quick ConfigsStep 6 Configure the

GlobalProtect Administrator’s Guide 167GlobalProtect Quick Configs GlobalProtect for Internal HIP Checking and User-Based Access Step 9 Create the HI

168 GlobalProtect Administrator’s GuideMixed Internal and External Gateway Configuration GlobalProtect Quick ConfigsMixed Internal and External Gate

GlobalProtect Administrator’s Guide 169GlobalProtect Quick Configs Mixed Internal and External Gateway Configuration Quick Config: GlobalProtect Mixe

170 GlobalProtect Administrator’s GuideMixed Internal and External Gateway Configuration GlobalProtect Quick ConfigsStep 2 Purchase and install a Gl

GlobalProtect Administrator’s Guide 171GlobalProtect Quick Configs Mixed Internal and External Gateway Configuration Step 5 Create the HIP profiles y

172 GlobalProtect Administrator’s GuideMixed Internal and External Gateway Configuration GlobalProtect Quick ConfigsStep 7 Configure the GlobalProte

12 GlobalProtect Administrator’s GuideEnable SSL Between GlobalProtect Components Set Up the GlobalProtect InfrastructureFor details about the types

GlobalProtect Administrator’s Guide 13Set Up the GlobalProtect Infrastructure Enable SSL Between GlobalProtect Components Deploy Server Certificates

iiContact InformationCorporate Headquarters:Palo Alto Networks4401 Great America ParkwaySanta Clara, CA 95054http://www.paloaltonetworks.com/contact/c

14 GlobalProtect Administrator’s GuideEnable SSL Between GlobalProtect Components Set Up the GlobalProtect Infrastructure• Generate a self-signed s

GlobalProtect Administrator’s Guide 15Set Up the GlobalProtect Infrastructure Set Up GlobalProtect User Authentication Set Up GlobalProtect User Auth

16 GlobalProtect Administrator’s GuideSet Up GlobalProtect User Authentication Set Up the GlobalProtect InfrastructureSupported GlobalProtect Authen

GlobalProtect Administrator’s Guide 17Set Up the GlobalProtect Infrastructure Set Up GlobalProtect User Authentication How Does the Agent Know What C

18 GlobalProtect Administrator’s GuideSet Up GlobalProtect User Authentication Set Up the GlobalProtect InfrastructureSet Up External Authentication

GlobalProtect Administrator’s Guide 19Set Up the GlobalProtect Infrastructure Set Up GlobalProtect User Authentication Set Up Client Certificate Auth

20 GlobalProtect Administrator’s GuideSet Up GlobalProtect User Authentication Set Up the GlobalProtect InfrastructureSet Up Client Certificate Auth

GlobalProtect Administrator’s Guide 21Set Up the GlobalProtect Infrastructure Set Up GlobalProtect User Authentication Step 2 Install certificates in

22 GlobalProtect Administrator’s GuideSet Up GlobalProtect User Authentication Set Up the GlobalProtect InfrastructureStep 3 Verify that the certifi

GlobalProtect Administrator’s Guide 23Set Up the GlobalProtect Infrastructure Set Up GlobalProtect User Authentication Set up Two-Factor Authenticati

GlobalProtect Administrator’s Guide iiiTable of ContentsGlobalProtect Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

24 GlobalProtect Administrator’s GuideSet Up GlobalProtect User Authentication Set Up the GlobalProtect InfrastructureEnable Two-Factor Authenticati

GlobalProtect Administrator’s Guide 25Set Up the GlobalProtect Infrastructure Set Up GlobalProtect User Authentication Enable Two-Factor Authenticati

26 GlobalProtect Administrator’s GuideSet Up GlobalProtect User Authentication Set Up the GlobalProtect InfrastructureStep 2 On the firewall that wi

GlobalProtect Administrator’s Guide 27Set Up the GlobalProtect Infrastructure Set Up GlobalProtect User Authentication Enable Two-Factor Authenticati

28 GlobalProtect Administrator’s GuideSet Up GlobalProtect User Authentication Set Up the GlobalProtect InfrastructureStep 2 Import the Root CA cert

GlobalProtect Administrator’s Guide 29Set Up the GlobalProtect Infrastructure Enable Group Mapping Enable Group MappingBecause the agent or app runni

30 GlobalProtect Administrator’s GuideEnable Group Mapping Set Up the GlobalProtect InfrastructureMap Users to GroupsStep 1 Create an LDAP Server Pr

GlobalProtect Administrator’s Guide 31Set Up the GlobalProtect Infrastructure Enable Group Mapping Step 2 Add the LDAP server profile to the User-ID

32 GlobalProtect Administrator’s GuideConfigure GlobalProtect Gateways Set Up the GlobalProtect InfrastructureConfigure GlobalProtect GatewaysBecaus

GlobalProtect Administrator’s Guide 33Set Up the GlobalProtect Infrastructure Configure GlobalProtect Gateways Step 2 Specify the network information

iv GlobalProtect Administrator’s Guide Set Up the GlobalProtect Mobile Security Manager . . . . . . . . . . . . . . . . . . . 59Mobile Security Mana

34 GlobalProtect Administrator’s GuideConfigure GlobalProtect Gateways Set Up the GlobalProtect InfrastructureStep 5 (Tunnel Mode only) Configure th

GlobalProtect Administrator’s Guide 35Set Up the GlobalProtect Infrastructure Configure GlobalProtect Gateways Step 6 (Optional) Define the notificat

36 GlobalProtect Administrator’s GuideConfigure the GlobalProtect Portal Set Up the GlobalProtect InfrastructureConfigure the GlobalProtect PortalTh

GlobalProtect Administrator’s Guide 37Set Up the GlobalProtect Infrastructure Configure the GlobalProtect Portal Define the GlobalProtect Client Conf

38 GlobalProtect Administrator’s GuideConfigure the GlobalProtect Portal Set Up the GlobalProtect Infrastructure The root CA certificate required t

GlobalProtect Administrator’s Guide 39Set Up the GlobalProtect Infrastructure Configure the GlobalProtect Portal Step 3 If you do not require the Glo

40 GlobalProtect Administrator’s GuideConfigure the GlobalProtect Portal Set Up the GlobalProtect InfrastructureStep 6 Specify which users to deploy

GlobalProtect Administrator’s Guide 41Set Up the GlobalProtect Infrastructure Configure the GlobalProtect Portal Step 8 Specify the gateways that use

42 GlobalProtect Administrator’s GuideConfigure the GlobalProtect Portal Set Up the GlobalProtect InfrastructureCustomize the GlobalProtect AgentThe

GlobalProtect Administrator’s Guide 43Set Up the GlobalProtect Infrastructure Configure the GlobalProtect Portal Customize the AgentStep 1 Go to the

GlobalProtect Administrator’s Guide v GlobalProtect Quick Configs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .143Remote A

44 GlobalProtect Administrator’s GuideConfigure the GlobalProtect Portal Set Up the GlobalProtect InfrastructureStep 2 Define what the end users wit

GlobalProtect Administrator’s Guide 45Set Up the GlobalProtect Infrastructure Configure the GlobalProtect Portal Step 3 Specify whether users can dis

46 GlobalProtect Administrator’s GuideConfigure the GlobalProtect Portal Set Up the GlobalProtect InfrastructureCustomize the GlobalProtect Portal L

GlobalProtect Administrator’s Guide 47Set Up the GlobalProtect Infrastructure Configure the GlobalProtect Portal Customize the Portal Login PageStep

48 GlobalProtect Administrator’s GuideDeploy the GlobalProtect Client Software Set Up the GlobalProtect InfrastructureDeploy the GlobalProtect Clien

GlobalProtect Administrator’s Guide 49Set Up the GlobalProtect Infrastructure Deploy the GlobalProtect Client Software Host Agent Updates on the Port

50 GlobalProtect Administrator’s GuideDeploy the GlobalProtect Client Software Set Up the GlobalProtect InfrastructureHost Agent Updates on a Web Se

GlobalProtect Administrator’s Guide 51Set Up the GlobalProtect Infrastructure Deploy the GlobalProtect Client Software Test the Agent InstallationUse

52 GlobalProtect Administrator’s GuideDeploy the GlobalProtect Client Software Set Up the GlobalProtect InfrastructureStep 3 Download the agent. 1.

GlobalProtect Administrator’s Guide 53Set Up the GlobalProtect Infrastructure Deploy the GlobalProtect Client Software Deploy Agent Settings Transpar

vi GlobalProtect Administrator’s Guide

54 GlobalProtect Administrator’s GuideDeploy the GlobalProtect Client Software Set Up the GlobalProtect InfrastructureCustomizable Agent SettingsIn

GlobalProtect Administrator’s Guide 55Set Up the GlobalProtect Infrastructure Deploy the GlobalProtect Client Software Deploy Agent Settings in the W

56 GlobalProtect Administrator’s GuideDeploy the GlobalProtect Client Software Set Up the GlobalProtect InfrastructureStep 2 From the mobile device,

GlobalProtect Administrator’s Guide 57Set Up the GlobalProtect Infrastructure Reference: GlobalProtect Agent Cryptographic Functions Reference: Globa

58 GlobalProtect Administrator’s GuideReference: GlobalProtect Agent Cryptographic Functions Set Up the GlobalProtect Infrastructure

GlobalProtect Administrator’s Guide 59Set Up the GlobalProtect Mobile Security ManagerAs mobile devices become more powerful, end users increasingly r

60 GlobalProtect Administrator’s GuideMobile Security Manager Deployment Best Practices Set Up the GlobalProtect Mobile Security ManagerMobile Secur

GlobalProtect Administrator’s Guide 61Set Up the GlobalProtect Mobile Security Manager Set Up Management Access to the Mobile Security Manager Set Up

62 GlobalProtect Administrator’s GuideSet Up Management Access to the Mobile Security Manager Set Up the GlobalProtect Mobile Security ManagerStep 6

GlobalProtect Administrator’s Guide 63Set Up the GlobalProtect Mobile Security Manager Set Up Management Access to the Mobile Security Manager Step 1

GlobalProtect Administrator’s Guide 1GlobalProtect OverviewWhether checking email from home or updating corporate documents from the airport, the majo

64 GlobalProtect Administrator’s GuideRegister, License, and Update the Mobile Security Manager Set Up the GlobalProtect Mobile Security ManagerRegi

GlobalProtect Administrator’s Guide 65Set Up the GlobalProtect Mobile Security Manager Register, License, and Update the Mobile Security Manager Acti

66 GlobalProtect Administrator’s GuideRegister, License, and Update the Mobile Security Manager Set Up the GlobalProtect Mobile Security ManagerInst

GlobalProtect Administrator’s Guide 67Set Up the GlobalProtect Mobile Security Manager Register, License, and Update the Mobile Security Manager Step

68 GlobalProtect Administrator’s GuideSet Up the Mobile Security Manager for Device Management Set Up the GlobalProtect Mobile Security ManagerSet U

GlobalProtect Administrator’s Guide 69Set Up the GlobalProtect Mobile Security Manager Set Up the Mobile Security Manager for Device Management Step

70 GlobalProtect Administrator’s GuideSet Up the Mobile Security Manager for Device Management Set Up the GlobalProtect Mobile Security ManagerStep

GlobalProtect Administrator’s Guide 71Set Up the GlobalProtect Mobile Security Manager Set Up the Mobile Security Manager for Device Management Step

72 GlobalProtect Administrator’s GuideSet Up the Mobile Security Manager for Device Management Set Up the GlobalProtect Mobile Security ManagerStep

GlobalProtect Administrator’s Guide 73Set Up the GlobalProtect Mobile Security Manager Set Up the Mobile Security Manager for Device Management Confi

2 GlobalProtect Administrator’s GuideAbout the GlobalProtect Components GlobalProtect OverviewAbout the GlobalProtect ComponentsGlobalProtect provid

74 GlobalProtect Administrator’s GuideSet Up the Mobile Security Manager for Device Management Set Up the GlobalProtect Mobile Security ManagerStep

GlobalProtect Administrator’s Guide 75Set Up the GlobalProtect Mobile Security Manager Set Up the Mobile Security Manager for Device Management Step

76 GlobalProtect Administrator’s GuideSet Up the Mobile Security Manager for Device Management Set Up the GlobalProtect Mobile Security ManagerStep

GlobalProtect Administrator’s Guide 77Set Up the GlobalProtect Mobile Security Manager Enable Gateway Access to the Mobile Security Manager Enable Ga

78 GlobalProtect Administrator’s GuideEnable Gateway Access to the Mobile Security Manager Set Up the GlobalProtect Mobile Security ManagerStep 3 Sp

GlobalProtect Administrator’s Guide 79Set Up the GlobalProtect Mobile Security Manager Enable Gateway Access to the Mobile Security Manager Step 5 Co

80 GlobalProtect Administrator’s GuideDefine Deployment Policies Set Up the GlobalProtect Mobile Security ManagerDefine Deployment PoliciesAfter a m

GlobalProtect Administrator’s Guide 81Set Up the GlobalProtect Mobile Security Manager Define Deployment Policies characteristics of the device, such

82 GlobalProtect Administrator’s GuideDefine Deployment Policies Set Up the GlobalProtect Mobile Security Managersupports a variety of LDAP director

GlobalProtect Administrator’s Guide 83Set Up the GlobalProtect Mobile Security Manager Define Deployment Policies The way you choose to manage and co

GlobalProtect Administrator’s Guide 3GlobalProtect Overview About the GlobalProtect Components GlobalProtect ClientThe GlobalProtect client software

84 GlobalProtect Administrator’s GuideDefine Deployment Policies Set Up the GlobalProtect Mobile Security ManagerPush a GlobalProtect VPN configura

GlobalProtect Administrator’s Guide 85Set Up the GlobalProtect Mobile Security Manager Define Deployment Policies Integrate the Mobile Security Manag

86 GlobalProtect Administrator’s GuideDefine Deployment Policies Set Up the GlobalProtect Mobile Security ManagerDefine HIP Objects and HIP Profiles

GlobalProtect Administrator’s Guide 87Set Up the GlobalProtect Mobile Security Manager Define Deployment Policies Create HIP Objects and HIP Profiles

88 GlobalProtect Administrator’s GuideDefine Deployment Policies Set Up the GlobalProtect Mobile Security ManagerStep 2 Create the HIP profiles that

GlobalProtect Administrator’s Guide 89Set Up the GlobalProtect Mobile Security Manager Define Deployment Policies Create Configuration ProfilesMobile

90 GlobalProtect Administrator’s GuideDefine Deployment Policies Set Up the GlobalProtect Mobile Security Manager Configuration Profiles—Contain th

GlobalProtect Administrator’s Guide 91Set Up the GlobalProtect Mobile Security Manager Define Deployment Policies Create an iOS Configuration Profile

92 GlobalProtect Administrator’s GuideDefine Deployment Policies Set Up the GlobalProtect Mobile Security ManagerStep 2 Enter identifying informatio

GlobalProtect Administrator’s Guide 93Set Up the GlobalProtect Mobile Security Manager Define Deployment Policies Step 6 Provide configuration settin