Anyone got Global Protect 6.1.0 for Linux to work on Ubuntu 22.04?

[Jonas_thell]

We had a quick test and still got the SSL handshake failure. Anyone got it to work and can share anything on how?

The version 6.1.0 is supposed to work on Ubuntu 22.04.

Thanks!

Br

Jonas

[JonGross · Accepted solution]

Yes, we have it working.

When connecting to Global Protect and authenticating to Azure SAML, the embedded browser on Linux machines will fail during TLS handshaking .    Force the client to use Firefox or what ever is the default browser.

Stop the Global Protect service.

sudo systemctl stop gpd.service

Create a new entry in the /opt/paloaltonetworks/globalprotect/pangps.xml configuration file.  Set the default-browser value to yes under <Settings>.

Example:

<?xml version="1.0" encoding="UTF-8"?>
<GlobalProtect>
    <Settings>
        <default-browser>yes</default-browser>
        
   <Settings>

Reboot. 

[Jonas_thell]

Thank you for this solution!

Br

Jonas

[raghavendra.badiger]

This doesn't work for me, I get following error:

Authentication Failed

Please contact the adminsitrator for further assistance

Error code: -1

I have SAML authentication setup and authentication is successful on the machine. Has anyone seen this error before?

Regards,

Raghav

[JonGross]

You can try this.  It disables OpenSSL version 3. This is using the GUI version on Ubuntu 22.

Modify the file /usr/lib/ssl/openssl.cnf.
At the end of the file you’ll see:

[system_default_sect]
CipherString = DEFAULT:@SECLEVEL=2

Change that to:
[system_default_sect]
CipherString = DEFAULT:@SECLEVEL=1
Options = UnsafeLegacyRenegotiation

Reboot and connect to the GP VPN portal.

[raghavendra.badiger]

I tried this too, since Ubuntu 22 has issues with SSL.

Both GUI and CLI GlobalProtect doesn't work, tried multiple reboots as well.

[juan.molleda]

Using Okta, the GUI version works for me, but I am struggling to enable the CLI version

[cdoublejj]

i get 90% of the way there but, the 365 auth web page says to click here to relaunch G.P. and GP never launches. PopOs (Ubuntu) 22.04 LTS

[cdoublejj]

EDIT: well what ever happened, the continue button the cert warning windows is now permanently greyed out. it says the identity can't be verified, continue anyway is greyed out.