GlobalProtect for Arch Linux

[Rohit_0110]

Hi, I want to use global protect in Arch linux. I looked for the setup file at link which only exist with .deb and .rpm 
anyone Know how could I make this possible for arch Linux

[lidewu · Accepted solution]

Hi,

   https://aur.archlinux.org/packages?K=globalprotect&SB=p

   https://archlinux.org/packages/extra/x86_64/globalprotect-openconnect/

   You can test it

[Rohit_0110]

Hi, @lidewu Thanks!
As I want to use this in a organisation is it safe as per the organisation

[jfarm · Accepted solution]

You can install the official one, I've done it several times on Arch both in my lab and with my corporate issued machine. 

Extract the tgz file from the support portal.

Locate the GlobalProtect_UI_tar-X.Y.Z.tgz within that directory and extract it.

Go to the extracted directory, execute sudo ./install.sh

It should install without issue

Also if using SAML auth you have to add the default browser config, or it will fail when passing the SAML prompts with the system rendering engine. 

To fix this edit /opt/paloaltonetworks/globalprotect/pangps.xml with sudo or root permissions.

<?xml version="1.0" encoding="UTF-8"?>
<GlobalProtect>
       <Settings>
               <can-continue-if-portal-cert-invalid>yes</can-continue-if-portal-cert-invalid> 
               <default-browser>yes</default-browser>

Note: can-continue-if-portal-cert-invalid>yes</can-continue-if-portal-cert-invalid is required if you use *.gpcloudservice.com for your Prisma portal, otherwise you shouldn't set this option.

[Rohit_0110]

Hi @jfarm, Thanks!

I had already edited that but it working once after each reboot. As, I discconect and try to reconnect it won't and give Error: Default Browser not enabled  

[R.Bilgin]

In my case I am not able to install it. When I run the command "sudo ./install.sh", I get
systemd is detected.

Enable gps service...

Enable gpa service...

Starting gp service...

Enable gp autostart

Set default browser...

Starting gpa...

but it doesn't do anyting. If I check the logs, I seee gpdservice is masked.

[clearythom]

There's a couple dependencies that need to be installed, wmctrl and Qt5 WebKit.  wmctrl requires X11 instead of Wayland.  I don't think they've included Wayland support in the app yet.  Best to install the `GlobalProtect_tar` package instead of the `GlobalProtect_UI_tar` package for now and run it with the command line, or figure out how to work around it.

https://docs.paloaltonetworks.com/globalprotect/5-1/globalprotect-app-user-guide/globalprotect-app-f...

[epolinko]

I'm having an issue getting the cli installed on Arch.  Tried using "sudo install.sh" from inside package GlobalProtect_tar-6.2.1.1-7.tgz, and get similar output as R.Bilgin above.  Here's the contents of my /opt/paloaltonetworks/globalprotect/install.log:

==============================
install.sh
===============================
Mon Apr 21 11:52:47 AM EDT 2025
systemd is detected.
cp: cannot stat 'globalprotect': No such file or directory
cp: cannot stat 'PanGPA': No such file or directory
cp: cannot stat 'PanGPS': No such file or directory
cp: cannot stat 'PanGpHip': No such file or directory
cp: cannot stat 'PanGpHipMp': No such file or directory
cp: cannot stat 'globalprotect.sha256': No such file or directory
cp: cannot stat 'PanGPA.sha256': No such file or directory
cp: cannot stat 'PanGPS.sha256': No such file or directory
cp: cannot stat '*.so*': No such file or directory
cp: cannot stat 'license.cfg': No such file or directory
cp: cannot stat 'gpd': No such file or directory
cp: cannot stat 'gpd.service': No such file or directory
cp: cannot stat 'gpa.service': No such file or directory
cp: cannot stat 'pre_exec_gps.sh': No such file or directory
cp: cannot stat 'gpui_apt_dep.sh': No such file or directory
cp: cannot stat 'gpui_yum_dep.sh': No such file or directory
cp: cannot stat 'globalprotect.1.gz': No such file or directory
Enable gps service...
cp: cannot stat '/opt/paloaltonetworks/globalprotect/gpd.service': No such file or directory
chmod: cannot access '/opt/paloaltonetworks/globalprotect/pre_exec_gps.sh': No such file or directory
Failed to enable unit: Unit gpd.service does not exist
Enable gpa service...
Starting gp service...
Failed to start gpd.service: Unit gpd.service not found.
Starting gpa...
Login User: epolinko
SUDO User: epolinko
Effect User: root
start GPA for epolinko
bash: line 1: /opt/paloaltonetworks/globalprotect/PanGPA: No such file or directory