GlobalProtect VPN - Linux

Installing GlobalProtect

  1. Installing the GlobalProtect VPN agent

    Open a Terminal window and execute one of the following commands

    Note: You will need sudo access to install the Global Protect agent package. Ubuntu user’s may receive the following error after the package has been installed, please just ignore the error, it’s related to the apt command not being able to access your home directory.

    N: Download is performed unsandboxed as root as file '/home/<usernmame>/Downloads/GlobalProtect_UI_focal_deb-6.1.1.0-49.deb' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)

  2. Generate a UoM GlobalProtect configuration file

    1. Cut and paste the following cat command into a Terminal window to generate the configuration file
      2. cat > /tmp/pangps.xml <<_EOF
      <?xml version="1.0" encoding="UTF-8"?>
      <GlobalProtect>
          <Settings>
             <connect-method>on-demand</connect-method>
            <default-browser>yes</default-browser>
          </Settings>
          <PanSetup>
              <Portal>vpn.unimelb.edu.au</Portal>
          </PanSetup>
      </GlobalProtect>
      _EOF
    2. Once the UoM pangps.xml configuration is completed use the following command to copy the file into the working directory
      3. sudo cp /tmp/pangps.xml /opt/paloaltonetworks/globalprotect/

  3. Restart your system

    The GlobalProtect agent requires a restart of your system in order to complete the installation process. Please either via the GUI controls or an open Terminal window restart your system

    sudo reboot

Launching GlobalProtect

  1. Navigate to the Activities (Installed Applications) window

    Select the Show Applications button on your desktop or if applicable select the Activities button located on the left hand side of the top menu bar to launch the Activities window.

  2. Launch the GlobalProtect agent

    You can either scroll through your installed GUI applications until you located the Global Protect agent launcher or you can search for it via the search dialogue box.

  3. Establish a VPN connection

    Once the Global Protect agent has loaded, please click the Connect button

    The agent will launch a Okta 2FA site via your systems default web browser. Once the Okta 2FA site has loaded please provide your University credentials and click the Log in button.

    Note: If your system presents a smaller Okta window with the title PanGPU and not your system's default web browser, please refer to the previous section BYOD Linux Systems, Step 5. Generate a UoM GlobalProtect configuration file to fix this issue.

    Upon the first successful Okta 2FA connection you will be prompted to allow the Global Protect agent to be associated with the vpn.unimelb.edu.au URL. Please select the checkbox and then click on the Open Link button

    Note: The above prompt will only occur upon the first connection or if another VPN agent get assigned as the default VPN agent.

Disconnecting GlobalProtect

  1. Launch the Global Protect Agent

    Select the Show Applications or Activities button on your desktop.

    You can either scroll through your installed GUI applications until you located the Global Protect agent or you can search for it via the search dialogue box.

  2. Disconnect from the VPN

    Simply click on the Disconnect button to terminate the VPN connection.

    Note: The process of disconnecting from the VPN will temporarily affect your system’s network connection.

  3. Closing the Global Protect Agent Application Window

    Just click on anything away from the agent’s window and it will close off.

Additional Support

If you require further technical assistance, please contact Student IT and start a chat. Alternatively, you can contact Student IT by phone: 13 MELB (13 6352) (domestic) or +61 3 9035 5511 (international).

If you require support after hours, please submit a support ticket.

Last updated 26 Sep 2023