PaloAltoNetworks GlobalProtect VPN, anyone successfully using this with Linux (on Fedora)?

VPN
1

Currently typing this on Windows, as I’ve tried many different configurations using the following packages on Fedora 27:
NetworkManager-openconnect, NetworkManager-openconnect-gnome, NetworkManager-strongswan, NetworkManager-strongswan-gnome, NetworkManager-vpnc-gnome (+vpnc packages).

None of these are working for me. I’ve copied the connection information from a successful login on Windows, and nothing I do seems to connect properly on Linux.

There are a number of posts out there (stackoverflow, ubuntu forums, even GlobalProtect docs) that have shown it can work, often using this package: GitHub - dlenski/openconnect: OpenConnect client extended to support Palo Alto Networks' GlobalProtect VPN which claims to support GlobalProtect VPN. I’ve done everything I know to do except build this package from source, mostly because I’m assuming NetworkManager-openconnect, and NetworkManager-openconnect-gnome, are built off of this.

Has anyone configured a VPN connection like this: Tunnel, IPSec, pre-shared key (standard username / password login)? Trying to understand what I’m missing.

Off topic, but… how do we influence these companies to support Linux? I think it’s crazy that they don’t support it given that they serve a lot of enterprise-level clients, and it’s not like they’re new to the market. From where i’m sitting, it seems like they’re ignoring the fact that Linux is a viable OS by only offering clients for MacOS and Windows… arrrgh.

2

It works well. This link helped me to configure

3

Yes, but it was a while ago since I set it up. I’m too tired to think right now. Will update comments on how I did it.

As a refresher what errors are you getting I had to install some libs to get it to work.

4

The github page you linked is a fork of openconnect. That’s not the official openconnect repo. You do need to build it from source, you can’t just use the openconnect packages in Fedora.

I have used that fork and it works for me. I’m not using a gui to configure it, I just run it on the CL as described on the github page.

5

Out of curiosity, why not use a VPN that supports OpenVPN, which has easy-to-use clients for Linux?

6

Thanks for the link, I’ll give it a go this weekend.

7

Well part of my problem is that I’m trying to configure it using purely the system ui, and I haven’t dug through logs to see what it’s failing on. I didn’t want to go down that rabbit hole until I knew there was no simple solve, which is clearly the case.

I’ll follow up with some more info if the other links in this thread don’t set me straight. Thanks for the help!

8

If I had a choice, you bet I’d be using something with proper Linux support.