Context
This article will help you download and install GlobalProtect VPN version 6.3.3-h15 on your Linux workstation, upgrade from an older version, and connect to the UT Dallas VPN. All instructions are based on Ubuntu (Debian) and Rocky Linux (based on Red Hat Enterprise Linux). You may need to adjust these instructions if you use another Linux distribution.
Security update (October 2026): All Linux GlobalProtect versions older than 6.3.3-h15, including 6.2.8, are affected by a security vulnerability (CVE-2026-0307). Linux clients do not update automatically. If you use GlobalProtect on Linux, follow Upgrading from an older version below.
Download
Download GlobalProtect-Linux-6.3.3-h15.tgz (UT Dallas Box, sign in with your NetID). Box can't preview this file type, so click Download.
Installing
Palo Alto's recommended install method for version 6.2.1 and later is the gp_install.sh script. The script detects your Linux distribution and installs the right package for you.
- Open the terminal and use
cd to go to the folder you downloaded to, for example:
cd ~/Downloads
- Extract the file:
tar -xvf GlobalProtect-Linux-6.3.3-h15.tgz
- Run
ls and check that gp_install.sh is listed. If the files were extracted into a new folder, cd into that folder first.
- Run the installer without
sudo. It will ask for your password when it needs it:
./gp_install.sh
For a command-line-only install (servers or computers with no desktop), use ./gp_install.sh --cli-only instead.
- When the installer finishes, log out and log back in (or restart your computer).
- To open the GlobalProtect UI, choose GlobalProtect from your Applications menu, or run
globalprotect launch-ui.
Note: The GlobalProtect icon will generally not appear in the top taskbar in Linux. This is a known issue. You can always re-launch GlobalProtect (to connect or disconnect) using the methods listed above.
Upgrading from an older version
- Check your current version: open GlobalProtect and go to Settings > About, or run
globalprotect show --version.
- If it shows anything older than 6.3.3-h15 (for example 6.1.x, 6.2.x, or an earlier 6.3.3 build), disconnect, then follow Installing above. Running
./gp_install.sh over the old version upgrades it.
- Check the version again. It should show 6.3.3-h15 (build c63) or later.
Connecting
- To open the GlobalProtect UI, choose GlobalProtect from your Applications menu, or run
globalprotect launch-ui.
- Enter the portal address: utdvpn.utdallas.edu
- Click Connect.
- Your default browser will open to complete authentication. Log in with your NetID and Password, then complete Duo authentication.
Note: OIT is aware of issues with GlobalProtect for Linux when Firefox is set as your default browser. If you can't log in, keep Firefox installed but set Chrome as your default browser, then try again.
No browser opens when you click Connect? Run sudo nano /opt/paloaltonetworks/globalprotect/pangps.xml, add <default-browser>yes</default-browser> on a new line under <Settings>, save (Ctrl+O, Enter), exit (Ctrl+X), then log out and back in.
- When prompted, choose to open the application. The prompt may vary based on your version of Linux (Ubuntu and Rocky Linux are shown below). If you do not see the popup, choose the "click here to launch GlobalProtect" option.
- Your client will now show as connected.
Note: If you're having trouble running the VPN on Linux, visit
KA 900 for a list of possible fixes. When contacting the OIT Service Desk, include your Linux version (
cat /etc/os-release), your GlobalProtect version, and a screenshot of the error.