topic Re: Global Protect client for linux in General Topics

Global Protect client for linux

MPI-AE — Fri, 15 Mar 2019 12:41:38 GMT

Hey all,

I've just updated the global protect version to 4.1.8

In the docs, it says that the client supports linux.

I've followed that doc:
https://docs.paloaltonetworks.com/globalprotect/4-1/globalprotect-app-user-guide/globalprotect-app-for-linux/download-and-install-the-globalprotect-app-for-linux#

It says I should download the package "PanGPLinux-4.1.0.tgz" to a mac endpoint. But I can only download "GlobalPortect.pkg" for macs from the portal.

Can someone tell me how to get the package for linux clients? (for example ubuntu)

Thank you!

Re: Global Protect client for linux

mmeehan — Fri, 15 Mar 2019 12:49:20 GMT

You should be able to find the download in Updates > Software Updates and use the filter to find the Linux specific client.

Re: Global Protect client for linux

MPI-AE — Fri, 15 Mar 2019 14:17:00 GMT

There is no version 4.1.8 for linux available.

Should I take 4.1.7 then?

Re: Global Protect client for linux

mmeehan — Fri, 15 Mar 2019 14:30:40 GMT

The downloads are in the support portal. We are using 4.1.9.

Re: Global Protect client for linux

MPI-AE — Tue, 19 Mar 2019 14:23:27 GMT

@mmeehan

I installed GlobalProtect_deb-4.1.9.0-2.deb on my Ubuntu Desktop 18.04 via dpkg -i.

But I'm not able to open a vpn connection. It seems that the global protect client doesn't work at all.

For example, I cannot get into prompt mode.I type in "globalprotect" and hit enter. The cursor gets into the next line but I can't type in anything there.

Neither can I do a "globalprotect show --status. I don't get any output.

Can you give me some tips?

Re: Global Protect client for linux

MPI-AE — Wed, 20 Mar 2019 14:42:09 GMT

Has been a permission problem.

Does the linux client support HIP? For example a maching string?

Re: Global Protect client for linux

mmeehan — Thu, 21 Mar 2019 13:32:17 GMT

There may be some HIPS options available with the Linux client, we don't use any. I would check the documentaiton for a complete answer.

Re: Global Protect client for linux

hshawn — Thu, 21 Mar 2019 16:17:51 GMT

@MPI-AE Yes it does, it supports the same HIP checks as the windows and mac clients

Re: Global Protect client for linux

MPI-AE — Fri, 22 Mar 2019 12:32:08 GMT

@hshawn

for mac and windows, we use custom checks (registry / plist) to identify devices.

how can that be done with linux?

Re: Global Protect client for linux

hshawn — Fri, 22 Mar 2019 15:05:03 GMT

@MPI-AE heh, good catch I guess I really should have said you can use HIP checks with Linux too but yes you are correct some things will be OS specific