Palo Alto GlobalProtect VPN Client Installation (CentOS/RHEL Linux)

Action

To connect to UAlbany's VPN service using a CentOS or Red Hat Enterprise Linux device, follow the steps below.

Instructions

Installing GlobalProtect on Linux (CentOS/RHEL)

  1. The official Linux client is distributed differently than the Windows/Mac clients. 

    You can access the latest client by following this link (authentication required): GlobalProtect Linux

  2. Download the latest .tgz file to a location on your CentOS/RHEL machine (as of this writing, PanGPLinux-5.3.0-c32.tgz)

  3. Launch a Terminal application and navigate to the directory in which you saved the .tgz file.

  4. Run the following command to extract the file:

    tar xvf PanGPLinux-5.3.0-c32.tgz
  5. Run the following command to install the client, entering your workstation's user password if prompted:

    sudo rpm -i GlobalProtect_rpm-5.3.0-32.rpm

Connecting to GlobalProtect on Linux (CentOS/RHEL)

  1. Run the following command to connect to GlobalProtect:

    globalprotect connect --portal uavpn.albany.edu
  2. Enter your UAlbany NetID and password when prompted.
  3. After entering your UAlbany NetID and password, you will receive an automatic push or phone callback (depending on your default Duo settings).  Refer to your device and authorize the Duo prompt.
  4. Optionally, you may add a comma (",") to the end of your password and append a Duo 2-step method option:

    2-Step MethodInstructions
    pushPerform a Duo push authentication to your Duo Mobile app on your mobile device
    phonePerform phone callback authentication
    smsSend an SMS passcode.  The initial authentication will fail (see next row)
    A numeric passcodeLog in using an SMS passcode previously sent by Duo (see above row), generated by the Duo Mobile app, or generated via a hardware token.  Examples: "123456" or "2345678"

    For example, if you wanted to use an SMS passcode to authenticate (instead of Duo Push or a phone call, you would enter:

    username: yournetid
    password: yourpassword,sms

    (this authentication step would fail, but you would receive an SMS message from Duo.  You'd then repeat the operation, entering the passcode (example with 123456 sent by duo)

    username: yournetid
    password: yourpassword,123456

Disconnecting to GlobalProtect on Linux (CentOS/RHEL)

  1. Run the following command to connect to GlobalProtect:

    globalprotect disconnect

Example Screenshot


These instructions have been tested on CentOS 7.6.



Need more help? Contact the ITS Service Desk.