topic Re: vpn clients for android and linux in General Topics

vpn clients for android and linux

knutelde — Mon, 09 Sep 2013 13:13:47 GMT

is there any good alternatives out there for connecting linux and android clients to global connect\PA native IPsec vpn ??

And I DO NOT mean that native cisco is OK, the encryption used here has been broken for several years,and are not designed for either linux or android, and in many cases it does not function well

Re: vpn clients for android and linux

Retired Member — Mon, 09 Sep 2013 13:17:51 GMT

I was using cisco client and searched an alternative especially for android but could not find any.I also need one....

Re: vpn clients for android and linux

knutelde — Mon, 09 Sep 2013 16:35:32 GMT

yes this seems very strange to as well, linux are an important part of many back bone and end users OS systems (i have been told that PA is built on centos linux distr for example) and there are estimates ranging between 25 and 50 mil linux users worldwide. For android I have seens estimates ranging from 40 - 60% of the global smartphone market, wich is double the number of iphone users, yet there is a iphone client from PA.

To me it just does not make sense. I have seen in several discussions here that these clients have been placed on the roadmap for PA development, but not for long yet it seems..

Is palo alto really satisfied with leaving this many users without a good and supported native solution ???

Re: vpn clients for android and linux

slaz — Mon, 09 Sep 2013 21:56:31 GMT

So are people successfully using the cisco anyconnect client for remote linux desktop laptop Cisco AnyConnect VPN Client Administrator Guide, Version 2.0 - Common AnyConnect VPN Client Installation and Configurati… ?

I'm thinking of testing it for Mac and windows as well. I have been disappointed with the inability to easily prevent the GP agent from running at startup on Mac and windows... and the inability to make the agent process quit.

Re: vpn clients for android and linux

gwesson — Mon, 09 Sep 2013 22:06:04 GMT

You can connect a linux client (using vpnc) to GlobalProtect as long as you've enabled tunnel mode and allow x-auth.

For Android, if you have purchased the portal license you can use the native Android GlobalProtect client (I use it myself on my Galaxy S3). Even if you don't have the license you can use the native VPN function on Android and iOS, as long as you have it set up with x-auth as above.

If you do have the paid license, you can find the app in the Play Store: https://play.google.com/store/apps/details?id=com.paloaltonetworks.globalprotect

iOS version is here: https://itunes.apple.com/us/app/globalprotect/id592489989?mt=8

Here's a doc talking about how to enable x-auth and get vpnc to connect:

using vpnc with Palo Alto 4.1 IPSEC/Xauth

Hope this helps!

Greg

edit: had the wrong link to the discussion before - sorry about that!

Re: vpn clients for android and linux

slaz — Tue, 10 Sep 2013 19:12:24 GMT

Greg... this is good. I have been able to easily get linux, ios and Mac OSX to connect using tunnel mode and Xauth. Native clients!!

Now Windows is the sticking point. Any ideas on how to avoid having to install the PA GP client on Windows. We are experimanting with Windows settings in the native client, with no luck so far.

Re: vpn clients for android and linux

slaz — Tue, 10 Sep 2013 20:18:38 GMT

hmm. apparently it will be difficult if not impossible to get the windows native client to play nice with Ipsec / Xauth (especially with psk). This juniper tech note explains..

Juniper Networks - NCP Secure Client – Juniper Edition (IPsec client) FAQ - Knowledge Base

Re: vpn clients for android and linux

knutelde — Sat, 14 Sep 2013 18:57:40 GMT

HI,

yes I have also found anothwer app vpncilla that connects fine, and I think it is sad that their android client is restricted to portal license users, a lot of users, like my company uses global protect, witout having or need ing the rather expensive portal license.

andnothing good for linux wich is my main problem, native cisco with x auth does not work so good, and it uses broken security encryption.

besides palo alto does not support this, saying its not their native solution like global protect client for windows or ios.

like I said it have been on their roadmap for years and I am surprised, that we havent seen it yet