Download and Install the GUI Version of GlobalProtect for Linux

1. Download the GlobalProtect app for Linux.

   1. Log in to the Customer Support Portal. After you enter your username and password credentials, you are authenticated and you are logged in to the support site.
   2. Select UpdatesSoftware Updates.
   3. Filter by GlobalProtect Agent for Linux, and download the associated TGZ file.
   4. Extract the files from the package.

      You will see multiple installation packages for supported operating system versions—DEB for Debian and Ubuntu and RPM for CentOS and Red Hat. The package for the GUI version is denoted by a GlobalProtect_UI prefix.
2. (Optional) If your Linux endpoint must use a manual proxy server configuration, configure the proxy settings.

   The GlobalProtect app for Linux supports only a basic proxy server configuration but does not support the use of Proxy Auto-Configuration (PAC) files and proxy authentication.

   The GlobalProtect app for Linux obtains the proxy settings from the HTTP_PROXY, HTTPS_PROXY and NO_PROXY environment variables in the /etc/environment file. If you later change the system proxy configuration, verify that the terminal from which GlobalProtect runs uses the proxy environment variables. If you do not see the new settings, log out and back in for the new settings to take effect.

   If you have configured the HTTP_PROXY variable or the HTTPS_PROXY variable, make sure that the GlobalProtect portal matches the settings configured for the NO_PROXY variable.

   1. To set your proxy on your Linux endpoint, edit the HTTP_PROXY environment variable or HTTPS_PROXY environment variable (for example, HTTPS_PROXY=”https://yourproxy.local:8080”).
   2. To configure the IP addresses or domain names that you want to exclude from the proxy, edit the NO_PROXY environment variable (for example, NO_PROXY=”www.gpqa.com”).

      Use commas to separate multiple IP addresses or domain names. Starting with GlobalProtect app 5.1.6, you can use the wildcard character (*) for IP addresses or domain names (for example, NO_PROXY=”*.domain.com”).
3. Install the GUI version of the GlobalProtect app for Linux.

   To Install the GlobalProtect app UI distribution package, use the $ ./gp_install.sh command:

   $ ./gp_install.sh --help
   Usage: $ sudo ./gp_install [--cli-only | --arm | --help] 
     --cli-only: CLI Only
     --arm:      ARM
     no options: UI

   Starting from GlobalProtect Linux version 6.2.1, you must use the following commands to install the CLI or GUI versions of the app:

   • To install the GlobalProtect UI package- $ ./gp_install.sh
   • To install the GlobalProtect CLI package- $ ./gp_install.sh --cli-only

   You don't need to run the ./gp_install.sh with sudo for GlobalProtect app Linux 6.2.1 and later versions. As the script executes, users will be prompted to enter the sudo password.

   The script checks the Linux distribution and version in your environment to identify and install the packages required. After installation completes, the GlobalProtect app automatically launches.
4. Log out of the Linux operating system or the SSH session depending on the installation method you used and log back in.

   When you log out, package updates are applied and you are able to see the GlobalProtect icon (as well as any other relevant updates) when you log back in. This step is required to ensure that any new package updates during install are applied to the GlobalProtect app.

   If you do not see the GlobalProtect icon in the tray after logging in, follow one of the steps below:

   • Type the globalprotect launch-ui CLI command in a terminal window.
   • Search for globalprotect in the application list and pin it to your dashboard.
5. Specify your portal address and enter your credentials when prompted to begin the connection process.
6. (Optional) To import a certificate, complete the following steps.

   When you want to pre-deploy a client certificate to an endpoint for certificate-based authentication, you can copy the certificate to the endpoint and import it for use by the GlobalProtect app. Use the globalprotect import-certificate --location <location> command to import the certificate on the endpoint. When prompted you must supply the certificate password.

   user@linuxhost:~$ globalprotect import-certificate --location /home/mydir/Downloads/cert_client_cert.p12 
   Please input passcode:
   Import certificate is successful.