GlobalProtect App for Linux Requirements and Features

The GlobalProtect app for Linux has software and hardware requirements and supports the features in this topic.

The following tables describe the requirements and features of the GlobalProtect app for Linux.

GlobalProtect App for Linux Requirements
Requirement	Details
Processor	x86 instruction set with 64-bit processor
RAM	256MB minimum
Disk space	100MB minimum
Operating systems	Palo Alto Networks supports GlobalProtect on multiple Linux operating systems. To determine the minimum GlobalProtect release for a specific operating system, refer to Where Can I Install the GlobalProtect App? in the Palo Alto Networks® Compatibility Matrix.
Packages	.deb .rpm .tar
Portal and gateway support	PAN-OS 7.1 and later releases
License	GlobalProtect Subscription on each gateway that supports Linux endpoints.

GlobalProtect App for Linux Features
Feature	Support
VPN	SSL IPSec GlobalProtect app for Linux supports one tunnel per Linux endpoint.
User interface	Command-line interface (CLI) only
Portal and gateway authentication	Two-factor authentication Client certificate authentication SCEP for certificate distribution Server certificate validation Authentication cookies
Networking	IP addressing—IPv4 and IPv6 addresses Split tunneling (include and exclude routes)
Proxy	Manual proxy server configuration
HIP data collection	Host state information only
Upgrade capability	Manual upgrades only
Status reporting	Notifications Errors
Connect method	User-logon On-demand
App customization For more information, see Customize the GlobalProtect App.	Connect Method (see above for options) GlobalProtect App Config Refresh Interval Allow Endpoint User to Disable GlobalProtect App SCEP Certificate Renewal Period (days) Enable Rediscover Network Option Enable Resubmit Host Profile Option Allow Endpoint User to Change Portal Address Allow Endpoint User to Continue when Portal Server Certificate is Invalid Custom Password Expiration Message (`LDAP Authentication Only`) Maximum Internal Gateway Connection Attempts Portal Connection, TCP Connection, and TCP Receive Timeouts Passcode/Confirm Passcode Max Times User Can Disable, and Disable Timeout