GlobalProtect VPN Client For Linux

Note

This information is a courtesy to our users who use the Linux operating system to use the Kennesaw State University VPN to connect to on-campus resources.

UITS does not officially support the Linux GlobalProtect clients, so be aware that any support is on a "best-effort" basis.

Installation

You can install the GlobalProtect app for Linux as either a Graphical (GUI) version or a Command Line (CLI) version. This documentation will cover using the GUI client, although both are in the archives below.

For this example, we'll be using the PanGPLinux-6.0.5-c11.tgz archive. Change the archive name as appropriate for the version that you are installing. Regardless of which version you wish to install, the first steps are the same:

Download the GlobalProtect app for Linux from the Files section below.

Create a directory to extract the archive to:

mkdir GlobalProtect
cp PanGPLinux-6.0.5-c11.tgz ./GlobalProtect
cd GlobalProtect

Extract the archive:
```
tar xvfz PanGPLinux-6.0.5-c11.tgz
```
You should see something like the following as it extracts the files from the archive:
```
x ./
x ./GlobalProtect_deb-6.0.4.1-28.deb
x ./GlobalProtect_deb_arm-6.0.4.1-28.deb
x ./GlobalProtect_focal_deb-6.0.4.1-28.deb
x ./GlobalProtect_focal_deb_arm-6.0.4.1-28.deb
x ./GlobalProtect_focal_rpm-6.0.4.1-28.rpm
x ./GlobalProtect_focal_rpm_arm-6.0.4.1-28.rpm
x ./GlobalProtect_focal_tar-6.0.4.1-28.tgz
x ./GlobalProtect_focal_tar_arm-6.0.4.1-28.tgz
x ./GlobalProtect_rpm-6.0.4.1-28.rpm
x ./GlobalProtect_rpm_arm-6.0.4.1-28.rpm
x ./GlobalProtect_tar-6.0.4.1-28.tgz
x ./GlobalProtect_tar_arm-6.0.4.1-28.tgz
x ./GlobalProtect_UI_deb-6.0.4.1-28.deb
x ./GlobalProtect_UI_focal_deb-6.0.4.1-28.deb
x ./GlobalProtect_UI_focal_rpm-6.0.4.1-28.rpm
x ./GlobalProtect_UI_focal_tar-6.0.4.1-28.tgz
x ./GlobalProtect_UI_rpm-6.0.4.1-28.rpm
x ./GlobalProtect_UI_tar-6.0.4.1-28.tgz
x ./manifest
x ./relinfo
```
You will see multiple installation packages for supported operating system versions:
- DEB for Debian and Ubuntu distributions (and their derivatives).
- RPM for Centos and Red Hat distributions (and their derivatives).
The packages for the GUI version start with a GlobalProtect_UI prefix.

Select your operating system from the choices below:
Debian / UbuntuFedora / Red Hat / AlmaLinux / Rocky Linux
Run the following command to install the app as root and install any missing packages required by the GlobalProtect app:
sudo apt-get install GlobalProtect_UI_deb-6.0.4.1-28.deb
Enter your local password if the sudo command prompts you for it.

After installation completes, the GlobalProtect app automatically launches. Specify your portal address and enter your NetID and password when prompted to begin the connection process.
Run the following command to install the app as root and install any missing packages that are required by the GlobalProtect app:
sudo yum install -y GlobalProtect_UI_rpm-6.0.4.1-28.rpm
Enter your local password if the sudo command prompts you for it.

After installation completes, the GlobalProtect app automatically launches. Specify your portal address and enter your NetID and password when prompted to begin the connection process.

Troubleshooting

In newer Linux distributions, a long-outstanding security hole was finally closed. Unfortunately, to allow the VPN client to work, we need to relax the security settings. If you get an error message when trying to connect to the VPN that looks like the following, apply the appropriate fix below:

SSL handshake failed

Failed to load URL https://vpn-groups.kennesaw.edu/SAML20/SP/ACS.

                                                      QtNetwork Error 6

Choose your operating system from the choices below:

Debian / UbuntuFedora / Red Hat / AlmaLinux / Rocky Linux

Make a backup of /etc/ssl/openssl.cnf.
Edit /etc/ssl/openssl.cnf and find a section named [openssl_init]
Add a line to that section, and then create two new sections immediately following that section so that it looks something like this:
```
[openssl_init]
providers = provider_sect
ssl_conf = ssl_sect

[ssl_sect]
system_default = system_default_sect

[system_default_sect]
Options = UnsafeLegacyRenegotiation

# List of providers to load
```
Note

You may already have the [ssl_sect] and [system_default_sect] sections. If that's the case, just add the Options = UnsafeLegacyRenegotiation line to the [system_default_sect] section.
Save the file and exit.
Reboot the machine.

Make a backup of /etc/pki/tls/openssl.cnf.
Edit /etc/pki/tls/openssl.cnf and find a section named [crypto_policy]

Add a line after the section heading so that it looks like:

[ crypto_policy ]
Options = UnsafeLegacyRenegotiation
.include = /etc/crypto-policies/back-ends/opensslcnf.config

Save the file and exit.
Reboot the machine.

Files

Version	Release Date	Size	File (SHA256 Checksum)
6.1.3	Nov-2023	194 MB	GlobalProtect VPN Clients for Linux (ARM and x86_64) PanGPLinux-6.1.3.tgz ed67b0ad43dffdf6c459a55f84ae1e11c680f7adc4a6e13ffe7cfe1e350227fc
6.1.3	Nov-2023	1.5 MB	Release Notes for GlobalProtect VPN Clients GlobalProtect-App-6.1.3-RN.pdf 7f91a02274e4346ed986a94d412489ee1020efed50dcc069f18a2867a1587971
6.1.2	Jul-2023	186 MB	GlobalProtect VPN Clients for Linux (ARM and x86_64) PanGPLinux-6.1.2.tgz cf5a5b1fafe9735c3278979eda0b4934ff4936fa047ad3947b24cd5aacd5d64b
6.1.2	Jul-2023	1.4 MB	Release Notes for GlobalProtect VPN Clients GlobalProtect-App-6.1.2-RN.pdf 57cbe12cc0c2ef40bb487613fadc4059ef442994e3fb957fb1ce65b90cb010bf
6.0.5	Jan-2023	179 MB	GlobalProtect VPN Clients for Linux (ARM and x86_64) PanGPLinux-6.0.5-c11.tgz a29870d98dfba4e07d3f34a5793987f25be8c421c2cead33b269cea9355fbd50
6.0.5	Jan-2023	2.7 MB	Release Notes for GlobalProtect VPN Clients GlobalProtect-App-6-0-5_RN.pdf caf351de6b0d6e780594badc77e1340db55d533958c724904c2e6dfa152d3ca6