At the moment we don’t use Globalprotect since we don’t have a use case for it. Now we’d like to connect one(!) iOS device via VPN and are wondering, if we have to use Globalprotect (and have to license it because mobile devices are a paid feature) or if its possible to configure a “good old” ipsec/ike VPN connection.
Yep works fine as a regular IPsec vpn.
Yes you don’t need GP license. You can use X-Auth standard for this.
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HAlICAW
I have done this using the ‘Cisco’ option on the native iOS vpn client, without needing the GP license. I enabled the pre-shared key on the gateway.