topic Linux VPN connectivity to a PAN FW in FIPS Mode in General Topics

Linux VPN connectivity to a PAN FW in FIPS Mode

wkintz — Tue, 17 Oct 2017 15:32:46 GMT

Good morning. I have a situation where I have a bunch of linux clients that need to be able to VPN into an environment protected by a PAN Firewall in FIPS mode. With FIPS mode enabled on the firewall, the ability to use 3rd party vpn clients via the x-auth feature is removed and there is no global protect client for the linux platform.

Anyone have any ideas on how we might make this work? Changing the linux client to either windows or macos is out of the question.

Re: Linux VPN connectivity to a PAN FW in FIPS Mode

BPry — Tue, 17 Oct 2017 21:10:25 GMT

@wkintz,

My first post lied,; and I'm not sure this one will be any better as I'm not 100% sure that this tool works, and I've never actually used it. Try it out, and if it doensn't work then adding your vote to the current feature request is going to have to be the answer.

https://github.com/dlenski/openconnect

Re: Linux VPN connectivity to a PAN FW in FIPS Mode

wkintz — Tue, 17 Oct 2017 21:26:23 GMT

That is an awesome find and thus far the best answer we've run across. We'll give it a go and post the results. We have GP portals running on several different codebases to run it against (6.1, 7.2 & 8.0) so we should get some good bredth of test results.