Install and Connect to GlobalProtect VPN (Linux)

Context

This  article will help you download and install the latest GlobalProtect VPN (6.1.2) on your Linux workstation. All instructions are based on Ubuntu (Debian) and RockyLinux (based on Red Hat Enterprise Linux). You may need to adjust these instructions if you are using another Linux distribution software. 

To check whether your version of Linux is compatible with GlobalProtect, please see Palo Alto Networks Compatibility Matrix.

Installing

  1. Download the appropriate installer for your device:
  2. Open the terminal on your device and navigate using cd to the location you have downloaded the installer. Then run the following commands - be sure to replace the <version number> with the current version you have downloaded:
    • RHEL/Rocky Linux: 
      sudo yum localinstall GlobalProtect_UI_rpm-<version number>.rpm
    • Ubuntu:
      sudo dpkg -i GlobalProtect_UI_deb-<version number>.deb
    • You may need to install dependencies before proceeding. If the system prompts you, confirm by typing y and pressing enter. Otherwise, you can manually install libqt5webkit5 by entering sudo apt-get install libqt5webkit5 and pressing enter.
  3. Open the terminal and enable default browser for SAML authentication. This allows for duo authentication.
    • Type cd /opt/paloaltonetworks/globalprotect and press Enter
    • Type sudo vi pangps.xml or sudo vim pangps.xml and press Enter
    • Add "<default-browser>yes</default-browser>" under "<Settings>" Do not include the quotations.
    • Save changes by typing ctrl+c and then doing :wq, then press Enter.
    • Restart your computer.
  4. To open the GlobalProtect UI, you can choose GlobalProtect from your Applications menu. Alternatively, you can run the command globalprotect launch-ui.

Note: The GlobalProtect icon will generally not appear in the top GUI taskbar in Linux. This is a known issue. You can always re-launch the GlobalProtect menu (to connect or disconnect) by re-launching using the methods listed above.

Connecting

  1. To open the GlobalProtect UI, you can choose GlobalProtect from your Applications menu. Alternatively, you can run the command globalprotect launch-ui.
  2. Enter the portal address: utdvpn.utdallas.edu
  3. Click Connect.
  4. Your default browser will open to complete the authentication. Log in with your NetID and Password, then complete Duo authentication.
Note: OIT is aware of issues with GlobalProtect for Linux when Firefox is set as your default browser. Try switching your default browser to Chrome if you are not able to log in.
  1. When prompted, choose to open the application. The application may vary based on your version of Linux (Ubuntu and Rocky Linux are shown below). If you do not see the popup, choose the "click here to launch GlobalProtect" option.


  2. Your client will now show as connected.
Note: If you're having trouble running the VPN on Linux, visit KA 900 for a list of possible fixes. 
Print Article

Related Articles (2)

Evolution Mail Client (Linux) for Microsoft 365 Email
The Evolution Mail client supports Microsoft 365 through the evolution-ews plugin, starting in evolution-ews v3.27.91 and above.
GlobalProtect Issue on Linux
Issue with the Global Protect VPN where users on Ubuntu 22.04 and other similar Linux versions cannot connect to VPN due to an SSL handshake issue. The issue is caused by the software update due to some package incompatibility. Follow the instructions in this article for possible solutions.

Related Services / Offerings (1)

PaloAlto GlobalProtect VPN
The GlobalProtect Virtual Private Network (VPN) provides secure access to restricted University data and resources using an off-campus computer through a secured Internet connection. In order to utilize VPN services, you must first be enrolled in Duo.