A GlobalProtect graphical client for Linux is available for use by the campus community to access the bSecure remote access service (VPN).
We would like to remind our users that while the Network Services Team provides a Linux-compatible VPN client, Linux based desktop operating systems are not officially supported by Berkeley IT. Limited resources make it unlikely that we will spend significant time diagnosing or resolving VPN issues which are only experienced by users on these platforms.
The GlobalProtect UI for Linux client is available on a Google Drive Share, accessible by anyone with an @berkeley.edu account (you must be using your Berkeley account to access the share).
A list of the Linux distributions currently supported by the manufacturer can be found in the GlobalProtect for Linux FAQ.
If the instructions below do not match the client you are using please reference the vendor instructions for GlobalProtect UI for Linux at the Palo Alto Networks Tech Docs site.
Note: To open the GlobalProtect dialog window if the icon is not visible, you can use the "globalprotect launch-ui" command in a shell/terminal window if you are running a vendor supported release of GlobalProtect.
- Download the desired software release bundle from the Google Drive share (available to UCB only)
- Files are named PanGPLinux-{version}.tgz, for example PanGPLinux-5.2.6-c18.tgz
- Files are named PanGPLinux-{version}.tgz, for example PanGPLinux-5.2.6-c18.tgz
- Unarchive the software bundle using your preferred method
- Start the installation using one of the following two methods
- Recommended: Use the provided gp_install.sh script using sudo
- sudo bash ./gp_install.sh
- If the gp_install.sh script fails, or if you prefer to do the install manually
- Select one of the files that starts with GlobalProtect_UI_ - these are the only installer compatible with the bSecure Remote Access Service
- There are usually three files, an RPM, and DEB, and a tarfile. If you system supports Debian or RedHat formatted packages those are the recommended versions as they will help install the necessary dependencies.
- There are usually three files, an RPM, and DEB, and a tarfile. If you system supports Debian or RedHat formatted packages those are the recommended versions as they will help install the necessary dependencies.
- Select one of the files that starts with GlobalProtect_UI_ - these are the only installer compatible with the bSecure Remote Access Service
- Recommended: Use the provided gp_install.sh script using sudo
- Depending on your Linux distribution the service will start automatically or you may need to restart your host to get all supporting daemons online
- Before connecting to the UC Berkeley remote access system users must first enable the use of the default broswer insted of the built-in GlobalProtect broswer for authentication. Instructions to make this change are in the Palo Alto Networks knoladge base:
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000001UdnCAE&lang=en_US - One running you should see a small grey globe in your system bar (if your window manager has a system bar). If not, or if you have no bar you can use the CLI command "globalprotect launch-ui" to open the GlobalProtect window
- Select the three horizontal bars to open the menu
- Select Settings to open the Settings dialog
- Enter vpn.berkeley.edu into the Portal field and click OK
- Select the Connect button to connect to the remote access service
- The default web browser will open with the CalNet web authentication interface for you to log into the service
- Once you have authenticated the system will complete the connection, this can take up to 20 seconds depending on your system
- When the connection is live you will see a disconnect button and a pull down where the different gateways can be selected
- You can disconnect using the Disconnect button