Red Hat SATELLITE 5.0.0 RELEASE NOTES Uživatelský manuál stáhnout pdf (Strana 11)

Palo Alto Networks PAN-OS 6.1 Release Notes • 11

PAN-OS 6.1 Release Information Features Introduced in PAN-OS 6.1

GlobalProtect Features

The topics in this section are the new GlobalProtect™ features introduced in PAN-OS 6.1.0. For more details

about these GlobalProtect features and for instructions on configuring them, refer to GlobalProtect Features

in the New Features Guide.

For information on related features introduced in the GlobalProtect Mobile Security Manager 6.1.0 release,

including how to set up an enterprise app store for your users and how to isolate business traffic and data on

mobile devices, refer to the GlobalProtect Mobile Security Manager 6.1 New Features Guide.

New GlobalProtect

Feature

Description

Extended SSO Support

for GlobalProtect Agents

With Single Sign-On (SSO), the GlobalProtect agent wraps the user’s Windows login

credentials to automatically authenticate and connect to the GlobalProtect portal and

gateway. SSO has been enhanced in this release so that when a third-party credential

provider is being used to wrap the user’s Windows login credentials, the GlobalProtect agent

wraps the third-party credentials to allow for successful authentication for the Windows

user. This extended SSO functionality is supported on Windows 7 and Windows Vista

clients.

Per App VPN for

GlobalProtect iOS App

The GlobalProtect iOS app now supports Per App VPN. With Per App VPN enabled, the

GlobalProtect iOS app will route all traffic from managed business apps through your

corporate VPN, while personal apps that are not managed can connect directly to the

Internet. An MDM service, such as the GlobalProtect Mobile Security Manager, is required

to enable the GlobalProtect iOS app's per App VPN capability.

Disconnect on Idle

The options to time out GlobalProtect clients have been extended to include settings you

can use to log out idle users. You can set the number of minutes after which users will be

disconnected from GlobalProtect if there is no traffic going through the VPN.

Disable Browser Access

to the Portal Login Page

Prevent public access to the GlobalProtect portal login page and unauthorized attempts to

authenticate to the GlobalProtect portal from a web browser by disabling the portal login

page. With the portal login page disabled, you can use a software distribution tool, such as

Microsoft's System Center Configuration Manager (SCCM), to allow your users to

download and install the GlobalProtect agent. GlobalProtect agents and apps will continue

to successfully authenticate and connect to the portal to receive configuration updates.

1 2 ... 6 7 8 9 10 11 12 13 14 15 16 ... 51 52

Žádné komentáře

Red Hat SATELLITE 5.0.0 RELEASE NOTES Uživatelský manuál Strana 11