How do I manage GlobalProtect VPN settings for multiple iOS devices

1. Access the Workspace ONE Console

- Log into the Workspace ONE UEM console.
- Navigate to Devices > Profiles & Resources > Profiles.

2. Create or Modify an iOS Profile

- Select Add to create a new profile or choose an existing iOS profile to modify.

- Choose iOS as the platform.

3. Configure General Settings

- Enter a Name for the profile to identify it easily.

- Optionally, add a Description to clarify the profile's purpose.

4. Set Up VPN Configuration

- In the VPN settings, configure the following:

- Connection Name: Name displayed on the endpoint.

- Connection Type:
- For GlobalProtect app versions 4.1.x and earlier, select Palo Alto Networks GlobalProtect.
- For GlobalProtect app version 5.0 and later, select Custom and enter the bundle ID as `com.paloaltonetworks.globalprotect.vpn`.

- Server: Enter the hostname or IP address of the GlobalProtect portal.

- User Authentication: Set to Certificate for secure authentication.

- Identity Certificate: Select the certificate that GlobalProtect will use to authenticate users.

5. Enable Per-App VPN Configuration (Optional)

- If you want to route traffic for specific managed apps through the VPN:

- Enable Per App VPN Rules to specify which apps can use the VPN tunnel.

6. Save and Publish the Profile

- After configuring the necessary settings, click Save and then Publish the profile to deploy it to the targeted iOS devices.

7. Monitor and Update Settings

- Use the Workspace ONE console to monitor the deployment status and performance of the GlobalProtect VPN across devices.

- Make updates to the VPN settings as needed by modifying the profile and republishing it.

By following these steps, you can effectively manage GlobalProtect VPN settings for multiple iOS devices using Workspace ONE, ensuring secure access to corporate resources for your users.