Global Protect for Linux

[mario11584]

Is there support for the Global Protect client for Linux? It's not a download option when logging into the portal via https. If not, is there a way to connect using Java? Would NetConnect work?_

[goku123 · Accepted solution]

Starting with PAN OS 5.0, xAuth is supported with VPNC on a couple of distros. Here is an excerpt from the 5.0 Release notes:

X-Auth Support –

The following VPN clients are now supported for GlobalProtect VPN access:

o Ubuntu Linux 10.04 LTS VPNC

o CentOS 6 VPNC

Here is a discussion wherein another user has posted steps on how to configure VPNC:

[mario11584]

Thanks a ton for your help!

[darren_g]

You might want to look at this blog

http://blog.davidvassallo.me/2012/11/22/connecting-to-a-palo-alto-network-globalprotect-gateway-from...

it details steps on getting a Linux box to connect with a Global protect gateway. I cannot vouch for the veracity of the information, but the feedback on the page indicates it works OK.

[ericgearhart]

I can vouch for the veracity of the information... I've tested vpnc with NetworkManager and it works great with a GlobalProtect Gateway as the IPSec termination point

[Mystique]

As posted as a comment at the end of the blog, does anyone know why manually adding of routes is needed on PAN FWs for split tunneling to work using VPNC client ? The comment says that split-tunnel policy works by default without any manual intervention on the VPNC client against a Cisco2911 vpn.

[BijKluit]

No support for libqt5network5 >= 5.14.1 ?

This includes debian 10 & 11. A whole world of desktop distributions are based on debian and everyone is happy with Ubuntu snap. Would like to see support for at least Debian 11 and later.