topic Re: Global Protect for Linux in General Topics

Global Protect for Linux

mario11584 — Wed, 06 Mar 2013 17:13:22 GMT

Is there support for the Global Protect client for Linux? It's not a download option when logging into the portal via https. If not, is there a way to connect using Java? Would NetConnect work?_

Re: Global Protect for Linux

goku123 — Wed, 06 Mar 2013 17:17:55 GMT

Starting with PAN OS 5.0, xAuth is supported with VPNC on a couple of distros. Here is an excerpt from the 5.0 Release notes:

X-Auth Support –

The following VPN clients are now supported for GlobalProtect VPN access:

o Ubuntu Linux 10.04 LTS VPNC

o CentOS 6 VPNC

Here is a discussion wherein another user has posted steps on how to configure VPNC:

Re: Global Protect for Linux

mario11584 — Wed, 06 Mar 2013 18:16:32 GMT

Thanks a ton for your help!

Re: Global Protect for Linux

darren_g — Thu, 07 Mar 2013 00:11:50 GMT

You might want to look at this blog

http://blog.davidvassallo.me/2012/11/22/connecting-to-a-palo-alto-network-globalprotect-gateway-from-linux/

it details steps on getting a Linux box to connect with a Global protect gateway. I cannot vouch for the veracity of the information, but the feedback on the page indicates it works OK.

Re: Global Protect for Linux

ericgearhart — Thu, 07 Mar 2013 01:22:13 GMT

I can vouch for the veracity of the information... I've tested vpnc with NetworkManager and it works great with a GlobalProtect Gateway as the IPSec termination point

Re: Global Protect for Linux

Mystique — Tue, 25 Jun 2013 04:56:10 GMT

As posted as a comment at the end of the blog, does anyone know why manually adding of routes is needed on PAN FWs for split tunneling to work using VPNC client ? The comment says that split-tunnel policy works by default without any manual intervention on the VPNC client against a Cisco2911 vpn.

Re: Global Protect for Linux

BijKluit — Sat, 20 Aug 2022 16:09:42 GMT

No support for libqt5network5 >= 5.14.1 ?

This includes debian 10 & 11. A whole world of desktop distributions are based on debian and everyone is happy with Ubuntu snap. Would like to see support for at least Debian 11 and later.