Download and Install the GlobalProtect App for Linux

1. Download the GlobalProtect app for Linux.
   1. Obtain the app package from your IT administrator and then copy the TGZ file to the Linux endpoint.
      For example, if you downloaded the package to a Mac endpoint, you can open a terminal and then copy the file:

      macUser@mac:~$ scp
      ~/Downloads/PanGPLinux-4.1.0.tgz linuxUser@linuxHost:<DestinationFolder>

      where <DestinationFolder> is a location such as ~/pkgs/ where you want to store the TGZ file.
   2. From the Linux endpoint, unzip the package.

      user@linuxhost:~$ tar -xvf ~/pkgs/PanGPLinux-4.1.0.tgz

      After you unzip the package, you will see installation packages—DEB for Ubuntu and RPM for CentOS and Red Hat—and the scripts to install and uninstall the packages.
2. (Optional) If your Linux endpoint must use a proxy configuration, configure the proxy settings.
   The GlobalProtect app for Linux supports only manual proxy server configuration and obtains the proxy settings from the https_proxy or HTTPS_PROXY environment variable. If you later change the system proxy configuration, verify that the terminal from which GlobalProtect runs uses the proxy environment variable. If you do not see the new settings, log out and back in to populate the new setting to the environment variable.
3. Install the app package using either the sudo dpkg -i <gp-app-pkg> or apt-get install <gp-app-pkg> command where <gp-app-pkg> is the name of your distribution package for your Linux version.

   user@linuxhost:~$ sudo dpkg -i GlobalProtect_deb-4.1.0.0-19.deb
   Selecting previously unselected package GlobalProtect.
   (Reading database ... 67776 files and directories currently installed.)
   Preparing to unpack GlobalProtect_deb-4.1.0.0-19.deb ...
   Start installing gp...
   Unpacking GlobalProtect (4.1.0-19) ...
   Setting up GlobalProtect (4.1.0-19) ...
   Enable gp service...
   Starting gp service...
   Create symlink for gp cli...

   user@linuxhost:~$ sudo
   apt-get install GlobalProtect_deb-4.1.0.0-23.deb
   [sudo] password for gpqa: 
   Reading package lists... Done
   Building dependency tree       
   Reading state information... Done
   Note, selecting 'globalprotect' instead of '/home/gpqa/Downloads/GlobalProtect_deb-4.1.0.0-24.deb'
   The following packages were automatically installed and are no longer required:
     linux-headers-4.10.0-28 linux-headers-4.10.0-28-generic linux-image-4.10.0-28-generic linux-image-extra-4.10.0-28-generic
   Use 'sudo apt autoremove' to remove them.
   The following NEW packages will be installed:
     globalprotect
   0 upgraded, 1 newly installed, 0 to remove and 73 not upgraded.
   After this operation, 0 B of additional disk space will be used.
   Get:1 /home/gpqa/Downloads/GlobalProtect_deb-4.1.0.0-24.deb globalprotect all 4.1.0-24 [1,334 kB]
   E: read, still have 59 to read but none left
   E: Error reading archive member header
   E: Prior errors apply to /home/gpqa/Downloads/GlobalProtect_deb-4.1.0.0-24.deb
   debconf: apt-extracttemplates failed: No such file or directory
   Selecting previously unselected package globalprotect.
   (Reading database ... 247210 files and directories currently installed.)
   Preparing to unpack .../GlobalProtect_deb-4.1.0.0-24.deb ...
   Start installing gp...
   Unpacking globalprotect (4.1.0-24) ...
   Setting up globalprotect (4.1.0-24) ...
   Enable gp service...
   Starting gp service...
   Create symlink for gp cli...
   

   The GlobalProtect app for Linux installs to the /opt/paloaltonetworks/globalprotect directory. After GlobalProtect first runs, the app also creates a GlobalProtect user folder $HOME/.globalprotect to save user registry configuration and other CLI related settings.
4. (Optional) Change CLI modes.
   You can run commands in either command-line or prompt mode. Command-line mode requires you to specify the full GlobalProtect command. Prompt mode requires you to specify only the command (without the app name) and displays more detailed output than command-line mode.
   1. To switch to prompt mode, enter globalprotect without any arguments.

      user@linuxhost:~$ globalprotect                        
      >>

   2. To exit prompt mode, enter quit.

      >> quit
      user@linuxhost:~$

5. View the help for GlobalProtect app for Linux.
   Prompt mode:

   >> help
   Usage: only the following commands are supported: 
   collect-log            -- collect log information 
   connect                -- connect to server 
   disconnect             -- disconnect
   disable                -- disable connection
   import-certificate     -- import client certificate file
   quit                   -- quit from prompt mode
   rediscover-network     -- network rediscovery
   remove-user            -- clear credential 
   resubmit-hip           -- resubmit hip information
   set-log                -- set debug level
   show                   -- show information

   Command-line mode:

   user@linuxhost:~$ globalprotect help
   Usage: only the following commands are supported: 
   collect-log            -- collect log information 
   connect                -- connect to server 
   disconnect             -- disconnect
   disable                -- disable connection
   import-certificate     -- import client certificate file
   quit                   -- quit from prompt mode
   rediscover-network     -- network rediscovery
   remove-user            -- clear credential 
   resubmit-hip           -- resubmit hip information
   set-log                -- set debug level
   show                   -- show information

6. Use the GlobalProtect App for Linux.