Open-vpn client for Globalprotect

[SThatipelly]

I have a consultant who is asking if the Global Protect VPN would connect with an OpenVPN-based client?  I suspect he is working from a Linux PC.

does Palo support it?

[Remo · Accepted solution]

Hi @SThatipelly 

As far as I know with an OpenVPN client the cpnnection is not supported (and also does not work). But there is also an official PaloAlto Global Protect Agent for Linux which you could use. If you don't have the Global Protect Gateway License you can try this one here: https://github.com/dlenski/openconnect This VPN client I know does work with GP.

[JoergSchuetter]

There is also a GP VPN client for Linux.

Granting other (3rd party) VPN clients should be possible, but this eliminates a few features. For example, you can no longer define split tunnel config.

[SThatipelly]

@Remo @JoergSchuetter  thanks for your responses.

Do I need to purchase GP gateway license to enable support for Linux?

[Remo]

Yes, if you want to use the official client, you need to buy the gateway license.

[SThatipelly]

@Remo @JoergSchuetter  thank you both for your responses.

[alfredof]

Ubuntu Linux 

• Install "network-manger-vpnc "
• Config a  VPN type Cisco compatible (vpnc) 
• Descripción -> Name
• Gateway -> IP_gateway
• Account -> <local_user> 
• Password -> <Password> 
• Use certificated -> NO 
• Name of Group -> Name_VPN 
• Secret  -> Name_of_Secret

[grchew]

is there a way to force the GP client and restrict all other clients?