Download and Install the GlobalProtect App for Linux

Download and Install the GUI Version of GlobalProtect for Linux

1. Download the GlobalProtect app for Linux.

   1. Log in to the Customer Support Portal. After you enter your username and password credentials, you are authenticated and you are logged in to the support site.
   2. Select UpdatesSoftware Updates.
   3. Filter by GlobalProtect Agent for Linux, and download the associated TGZ file.
   4. Extract the files from the package.

      user@linuxhost:~$ tar -xvf ~/pkgs/PanGPLinux-6.0.0.tgz
      									./
      									./GlobalProtect_deb-6.0.0.0-62.deb
      									./GlobalProtect_deb_arm-6.0.0.0-62.deb
      									./GlobalProtect_rpm-6.0.0.0-62.rpm
      									./GlobalProtect_rpm_arm-6.0.0.0-62.rpm
      									./GlobalProtect_tar-6.0.0.0-62.tgz
      									./GlobalProtect_tar_arm-6.0.0.0-62.tgz
                                                                 ./GlobalProtect_UI_deb-6.0.0.0-62.deb
                                                                 ./GlobalProtect_UI_rpm-6.0.0.0-62.rpm
      									/GlobalProtect_UI_tar-6.0.0.0-62.tgz
      									./manifest
      									./relinfo
                                                                ./gp_install.sh
                                                                   ./gp_uninstall.sh
      								

      You will see multiple installation packages for supported operating system versions—DEB for Debian and Ubuntu and RPM for CentOS and Red Hat. The package for the GUI version is denoted by a GlobalProtect_UI prefix.
2. (Optional) If your Linux endpoint must use a manual proxy server configuration, configure the proxy settings.

   The GlobalProtect app for Linux supports only a basic proxy server configuration but does not support the use of Proxy Auto-Configuration (PAC) files and proxy authentication.

   The GlobalProtect app for Linux obtains the proxy settings from the HTTP_PROXY, HTTPS_PROXY and NO_PROXY environment variables in the /etc/environment file. If you later change the system proxy configuration, verify that the terminal from which GlobalProtect runs uses the proxy environment variables. If you do not see the new settings, log out and back in for the new settings to take effect.

   If you have configured the HTTP_PROXY variable or the HTTPS_PROXY variable, make sure that the GlobalProtect portal matches the settings configured for the NO_PROXY variable.

   1. To set your proxy on your Linux endpoint, edit the HTTP_PROXY environment variable or HTTPS_PROXY environment variable (for example, HTTPS_PROXY=”https://yourproxy.local:8080”).
   2. To configure the IP addresses or domain names that you want to exclude from the proxy, edit the NO_PROXY environment variable (for example, NO_PROXY=”www.gpqa.com”).

      Use commas to separate multiple IP addresses or domain names. Starting with GlobalProtect app 5.1.6, you can use the wildcard character (*) for IP addresses or domain names (for example, NO_PROXY=”*.domain.com”).
3. Install the GUI version of the GlobalProtect app for Linux.

   To Install the GlobalProtect app UI distribution package, use the $ ./gp_install.sh command:

   $ ./gp_install.sh --help
   Usage: $ sudo ./gp_install [--cli-only | --arm | --help] 
     --cli-only: CLI Only
     --arm:      ARM
     no options: UI
4. Use the GUI version of the GlobalProtect App for Linux.

   After installation completes, the GlobalProtect app automatically launches. Specify your portal address and enter your credentials when prompted to begin the connection process.

   Because the GlobalProtect service supports only one socket connection to the GlobalProtect agent and to the GUI version of the GlobalProtect app, you must either log out of the Linux operating system or the SSH session depending on the installation method used as a root user after installing the app. You must log back in to the Linux endpoint as another user with non-privileged user privileges and the app launches.
5. (Optional) To import a certificate, complete the following steps.

   When you want to pre-deploy a client certificate to an endpoint for certificate-based authentication, you can copy the certificate to the endpoint and import it for use by the GlobalProtect app. Use the globalprotect import-certificate --location <location> command to import the certificate on the endpoint. When prompted you must supply the certificate password.

   user@linuxhost:~$ globalprotect import-certificate --location /home/mydir/Downloads/cert_client_cert.p12 
   Please input passcode:
   Import certificate is successful.