topic Remote Access VPN - Strongswan client to PA GP Gateway in General Topics

Remote Access VPN - Strongswan client to PA GP Gateway

CC2021 — Tue, 20 Apr 2021 11:51:22 GMT

Is it possible to access a GlobalProtect gateway using the strongswan client on Ubuntu 16.04 LTS? I am trying to use ikev2 and use certificate authentication. PA guidance suggests it is possible using Ubuntu 14 and PAN-OS7 but I can see no guidance for later versions.

Re: Remote Access VPN - Strongswan client to PA GP Gateway

BPry — Tue, 20 Apr 2021 16:26:58 GMT

@CC2021,

Any particular reason why you are using the StrongSwan client instead of the actual GlobalProtect Linux agent? The current documentation for strongSwan configuration hasn't been updated or validated since 7.0, but the setup process should be exactly the same and the documentation worked the last time I had to set it up.

I would try setting this up with IKEv1 to begin with just to verify that you have the process working, and then move on to attempt to get IKEv2 working correctly.

Re: Remote Access VPN - Strongswan client to PA GP Gateway

CC2021 — Tue, 20 Apr 2021 16:57:49 GMT

Thanks, the reason for not using the GlobalProtect client is that we are using a secure build supplied to us from a third party which doesn't allow for the installation of additional applications. There is a licensing issue which stops them being able to package the GP client and adding it to our build. I have tried ikev1 with no success which I was putting down to the guidance being so dated but I will look at it again to ensure I have captured all of the steps