A GlobalProtect graphical client for Linux is available for use by the campus community to access the bSecure remote access service (VPN).
Due to the wide variety of distributions, releases, installed software and libraries, IST is not able to provide end-user support for the Linux GlobalProtect client.
The GlobalProtect UI for Linux client is available on a Google Drive Share, accessible by anyone with an @berkeley.edu account (you must be using your Berkeley account to access the share). The share contains a README document with information related to the specific releases available for download.
If the instructions below do not match the client you are using please reference the vendor instructions for GlobalProtect UI for Linux at the Palo Alto Networks Tech Docs site.
Note: To open the GlobalProtect dialog window if the icon is not visible, you can use the "globalprotect launch-ui" command in a shell/terminal window if you are running v5.1.1 or newer.
- Download the desired software release bundle from the Google Drive share (available to UCB only)
- Files are named PanGPLinux-{version}.tgz, for example PanGPLinux-5.2.6-c18.tgz
- Files are named PanGPLinux-{version}.tgz, for example PanGPLinux-5.2.6-c18.tgz
- Unarchive the software bundle using your preferred method
- Select one of the files that starts with GlobalProtect_UI_ - these are the only installer compatible with the bSecure Remote Access Service
- There are usually three files, an RPM, and DEB, and a tarfile. If you system supports Debian or RedHat formatted packages those are the recommended versions as they will help install the necessary dependencies.
- There are usually three files, an RPM, and DEB, and a tarfile. If you system supports Debian or RedHat formatted packages those are the recommended versions as they will help install the necessary dependencies.
- Install the software using your desired method, if you are installing using the tar bundle more information is available in the vendor install guide
- Depending on your Linux distribution the service will start automatically or you may need to restart your host to get all supporting daemons online
- One running you should see a small grey globe in your system bar (if your window manager has a system bar). If not, or if you have no bar you can use the CLI command "globalprotect launch-ui" to open the GlobalProtect window
- Select the three horizontal bars to open the menu
- Select Settings to open the Settings dialog
- Enter vpn.berkeley.edu into the Portal field and click OK
- Select the Connect button to connect to the remote access service
- The default web browser will open with the CalNet web authentication interface for you to log into the service
- Once you have authenticated the system will complete the connection, this can take up to 20 seconds depending on your system
- When the connection is live you will see a disconnect button and a pull down where the different gateways can be selected
- You can disconnect using the Disconnect button