Global Protect new Linux UI

[hshawn]

I have the GP Linux CLI client working without any issues, however I wanted to test the UI client that just came out (5.1.0) Does anyone know how to actually use this? The PAN documentation has not been updated to mention this new version or the Linux UI yet. Installing it goes fine but I do not see anything installed to my desktop and when attempting to launch it from a command shell all I see is:

"Unable to run GlobalProtect CLI while GlobalProtect UI is running. Please consider installing the CLI only install package."

Which is great... but how do I find and launch the UI from my desktop? *confused*

[LeoSimon]

I was not on the beta either.      I downloaded the 5.1.0 release

[Stephen_Dowdy]

I'm using 5.1.0-101 and here's my perception:

The UI is started by an XDG (FreeDesktop) .desktop file that gets installed to /etc/xdg/autostart/PanGPUI.desktop)

The Exec for this is:  Exec=/opt/paloaltonetworks/globalprotect/PanGPUI

The running app is :

/opt/paloaltonetworks/globalprotect/PanGPUI start

(so not sure how the 'start' argument gets added)

This installs a System Tray item (looks like a globe), so if your DE doesn't support a System Tray, maybe you won't see any UI for it.

A co-worker clicks on the icon, and the interface window appears at the top of the screen.  however, unless he moves the cursor REALLY fast, the window disappears before he gets to it.   I don't have that problem, but i do have the problem where clicking on he hamburger icon of that window is REALLY touchy, and moving the mouse causes the popup menu to disappear -- so i have to use the cursor keys to select [ Settings | About ]

I am *sad* that the 'globalprotect' cli executable now always throws :

    Unable to run GlobalProtect CLI while GlobalProtect UI is running. Please consider installing the CLI only install package.

At least allow us to get the status (show --details, ...) stuff that way, because the UI doesn't give it in a useful way.

Also, while 'globalprotect show --notification' never showed the portal notification message, the new notification UI popup overwrites the message onto a single line over and over making it unreadable. 

That all said...  I'm also *sad* about the following:

  'globalprotect' cli returns 1 for all commands successful or not.  it should return 0 for success so we can script around it.   Also, every instantiation of 'globalprotect' (even --help) has a builtin alarm() that forces a 60 second delay.  so running the command multiple times (like to get multiple outputs for 'globalprotect show --{item}) take FOREVER.

also, sad-making... when the installer extracts to /opt/paloaltonetwork/ it doesn't bother to try to set proper ownership (user/group), leaving things owned by random matching UID/GID from the tarball.  (for me it's ntp:Debian-exim)

I am frankly disgusted and exhausted over the quality of software in general over the past decade and trying to find current/correct documentation and working around bugs and misfeatures.   siiiiigggghhhhhhh.

(also, the text-enry in this discussion forum is almost invisible to me, making it quite hard to type this message.  maybe it's just my Debian Stretch/Firefox setup)

Leaving on  a high note.  At least, thanks for finally getting a UI for Linux.  Just allow us to also use the CLI simultaneously, and fix the bugs in the cli.

thanks,

--stephen

[donkeystep1]

Same here on version 5.1.0-101, the UI only worked for the first time, clicking OR double-clicking on the PanGPUI doesn't take effect. And there's no menu items/ desktop icons. Ubuntu 19.04.
Tried stopping PanGPUI and running /opt/paloaltonetworks/globalprotect/PanGPUI from console, it seems to hang forever.
Tried stopping also PanGPA and PanGPS, and restarting, no effect.
Tried connecting from console - asked for certificates.

I'd be very grateful if it's possible to fix it.

[hshawn]

I don't think they have it setup to:

* Use the gnome task bar

* Adapt to "dark" themes

But it does work, here is what I did:

* Create a "shortcut" on your desktop or in the dash-to-dock or wherever you like

* Download a nice GP icon from the internet and pop that onto your shortcut properties

It should get better over time, it didn't used to show the GUI version at all and now with 5.1.1 it does. It also did not work with all flavors of Linux without some hacks and it should now work with any Linux.

[VTQNetwork]

Hi Guys,

I've just started to test GP linux client on Ubuntu 19.10.

I have the same problems in current and previous GP client version as you.

You can use this command to show GUI:

globalprotect launch-ui

Do you know how to monitor certificates?

I would like to show the store(s), install client cert.

In Palo doc, I've found optional modification of pangps.xml file, but it does not work for me, I have to troubleshoot 🙂