--- title: "Configuring Palo Alto GlobalConnect for Android Devices" slug: "configuring-palo-alto-globalconnect-for-android-devices" description: "Learn how to configure Palo Alto GlobalConnect VPN on Android devices for secure enterprise connectivity with Scalefusion." updated: 2024-08-13T10:29:04Z published: 2024-08-13T10:29:04Z canonical: "help.scalefusion.com/configuring-palo-alto-globalconnect-for-android-devices" --- > ## Documentation Index > Fetch the complete documentation index at: https://help.scalefusion.com/llms.txt > Use this file to discover all available pages before exploring further. # Configuring Palo Alto GlobalConnect for Android Devices Scalefusion and Android for Work make it easy for you to configure Palo Alto VPN on your managed Android devices. Follow the guide below to configure Palo Alto. ## Before you Begin 1. Complete [**Android for Work**](/docs/android-enterprise-android-for-work-setup-with-scalefusion-emm) Setup in Scalefusion Dashboard. 2. Enroll your corporate-owned devices using [**afw#mobilock**](/docs/using-afwmobilock-for-android-device-enrollment) 3. Invite your Employees to enroll their [**personal devices**](/docs/enrolling-a-personal-employee-owned-device). The following feature works only for devices enrolled via afw#mobilock and where Scalefusion application is set as a Device Owner or employee-owned devices where Scalefusion creates a Work Profile. It will not work if you are using legacy methods to enroll the devices. ## Search and Approve GlobalConnect The first step is to search and approve GlobalConnect for your organization. The steps are, 1. Sign In Scalefusion Dashboard. 2. Navigate to **Application Management > Play For Work Apps.** **![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1723541540784.png)** 3. Click on the **Add from Playstore** button to see the **Google Play** dialog. 4. In the **Google Play** dialog, search for **Palo Alto's** **GlobalProtect.** **![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1723541706367.png)** 5. Click on the **GlobalConnect** app and click on **Select** button. **![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1723541957756.png)** 6. The app will start appearing on the Scalefusion Dashboard. ![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1723542150836.png) ## Configuring GlobalConnect Settings Once you have the GlobalConnect app, the next step is to configure the application. The steps are, 1. Click on the GlobalConnect application to see the details card. 2. Click on the **App Configs** tab and click **CREATE** to see the configuration options. ![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1723542382570.png) 3. GlobalConnect gives you the following configuration options, | **Portal** | **The portal address or the server URL of the GlobalConnect VPN server.** | | --- | --- | | Username | The username to be used or blank. You can use [custom properties](/docs/using-custom-fields-as-wildcards) for a dynamic configuration, like **$device.** or **$user.email** | | Password | Optional field to specify the password for the VPN connection. | | Client Certificate | The client certificate is to be used for logging in to Portal. | | Client Certificate Passphrase | The passphrase for the client certificate is if the certificate is passphrase protected. | | AppList | Comma-separated list of apps that need to be blocked or allowed for VPN. | | Connection Method | The VPN Connection method to be used. | | Remove VPN Configuration Flag | Flag to remove VPN configuration. Set this flag to true to remove the VPN configuration | | Mobile ID | A unique identifier for the device. You can use the ***$device.customproperty***. | | Allow Network Bypass | Choose if you want to allow the VPN to be bypassed by applications. | | Cert Alias | The Alias of the client certificate, if any. | 4. Once you have entered the values, click on **SAVE** to save the configuration. All the saved configurations appear in the list. ![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1723543213446.png) ## Publishing the Application and Configuration Once you have created the configuration, the next step is to publish the application and then the configuration. The steps are, 1. From the App Details card, click on the **App Information** tab and click on **PUBLISH.** **![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1723544338718.png)** 2. Select the Android Device Groups/Profiles/Devices where you want to publish the application and click **PUBLISH.** **![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1723544414868.png)** 3. Now click on the **App Configs** tab. Click on the 3-dots > click on **Publish**. ![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1723544622429.png) 4. Select the Android Device Groups/Profiles/Devices where you have published the application in **Step 3**, and click **PUBLISH.** **![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1723544876350.png)** 5. This will cause the applications to be installed on the devices and then configured based on the configuration. **Please contact your VPN Service provider in case you need details on how to use a particular setting and the accepted values.**