Install and Connect to GlobalProtect VPN (Linux)

Context

This  article will help you download and install the latest GlobalProtect VPN (6.1.2) on your Linux workstation. All instructions are based on Ubuntu (Debian) and RockyLinux (based on Red Hat Enterprise Linux). You may need to adjust these instructions if you are using another Linux distribution software. 

To check whether your version of Linux is compatible with GlobalProtect, please see Palo Alto Networks Compatibility Matrix.

Installing

1. Download the appropriate installer for your device:
   • RPM Installer (use for RHEL/Rocky Linux)
   • DEB Installer (use for Ubuntu/Debian)
2. Open the terminal on your device and navigate using cd to the location you have downloaded the installer. Then run the following commands - be sure to replace the <version number> with the current version you have downloaded:
   • RHEL/Rocky Linux: 
     sudo yum localinstall GlobalProtect_UI_rpm-<version number>.rpm
     
   • Ubuntu:
     sudo dpkg -i GlobalProtect_UI_deb-<version number>.deb
     
   • You may need to install dependencies before proceeding. If the system prompts you, confirm by typing y and pressing enter. Otherwise, you can manually install libqt5webkit5 by entering sudo apt-get install libqt5webkit5 and pressing enter.
3. Open the terminal and enable default browser for SAML authentication. This allows for duo authentication.
   • Type cd /opt/paloaltonetworks/globalprotect and press Enter
   • Type sudo vi pangps.xml or sudo vim pangps.xml and press Enter
   • Add "<default-browser>yes</default-browser>" under "<Settings>" Do not include the quotations.
   • Save changes by typing ctrl+c and then doing :wq, then press Enter.
   • Restart your computer.
4. To open the GlobalProtect UI, you can choose GlobalProtect from your Applications menu. Alternatively, you can run the command globalprotect launch-ui.

Note: The GlobalProtect icon will generally not appear in the top GUI taskbar in Linux. This is a known issue. You can always re-launch the GlobalProtect menu (to connect or disconnect) by re-launching using the methods listed above.

Connecting

1. To open the GlobalProtect UI, you can choose GlobalProtect from your Applications menu. Alternatively, you can run the command globalprotect launch-ui.
2. Enter the portal address: utdvpn.utdallas.edu
3. Click Connect.
4. Your default browser will open to complete the authentication. Log in with your NetID and Password, then complete Duo authentication.

5. When prompted, choose to open the application. The application may vary based on your version of Linux (Ubuntu and Rocky Linux are shown below). If you do not see the popup, choose the "click here to launch GlobalProtect" option.
   
   
   
6. Your client will now show as connected.