GlobalProtect VPN for Linux

Because Northwestern's GlobalProtect requires Duo Mobile multi-factor authentication (MFA), only GUI versions of the GlobalProtect can be used on Linux systems. You cannot use the command line (CLI) interface. Given that requirement, these Linux versions are the only supported operating systems:

• Ubuntu 16.04 LTS
• Ubuntu 18.04 LTS
• Ubuntu 19.04
• Ubuntu 20.04
• Ubuntu 22.04
• Red Hat Enterprise Linux 8.7
• Red Hat Enterprise Linux 9.1
• CentOS 8.3

Set up GlobalProtect

1. Download the GlobalProtect installation package for your Linux system. The current version offered below is 6.1.2.
   • RHEL 7/centOS: https://chocolate.ci.northwestern.edu\Software\Titles\NU_Global_Protect\Current\Linux\GlobalProtect_UI_rpm.rpm
   • Ubuntu/Debian: https://chocolate.ci.northwestern.edu\Software\Titles\NU_Global_Protect\Current\Linux\GlobalProtect_UI_deb.deb
2. Open the terminal on your device and install GlobalProtect. Note that the commands may vary depending on your version of Linux.
   • RHEL 7/centOS CLI commands:
     yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
     yum localinstall --nogpgcheck GlobalProtect_UI_rpm.rpm
   • Ubuntu/Debian CLI commands:
     sudo apt-get install libqt5webkit5
     sudo dpkg -i GlobalProtect_UI_deb.deb
3. Open terminal and enable default browser for SAML authentication

•  cd /opt/paloaltonetworks/globalprotect
• sudo vi pangps.xml
  • Add  "<default-browser>yes</default-browser>" under "<Settings>" (Note: Do not add quotations.)
• Save changes by pressing "esc" then typing "wq!", then enter. 
• Reboot computer.

4. When prompted for a portal address, enter vpn-connect.northwestern.edu.
5. Once installation is complete, GlobalProtect will appear in your menu bar at the top of your Linux system.

Connect to GlobalProtect

1. Click the GlobalProtect icon in the menu bar, enter the portal address (vpn-connect.northwestern.edu), then click Connect.
2. When prompted, enter your NetID and NetID password, then confirm your identity with Duo multi-factor authentication. You will then be connected to GlobalProtect.
   
3. To disconnect, click the GlobalProtect icon again, then click Disconnect.
   
4. If you are not seeing the Global Protect icon in your menu bar, there is a CLI command to bring it up:
   1. On the terminal prompt, enter "globalprotect launch-ui"  (NOTE: It may take longer than expected to see the Online Passport page to appear in the next step)
   2. This will bring up the windows above
   3. You can use this if you need to connect and don't see the icon, or to bring up the icon when you need to disconnect.