GlobalProtect VPN for Linux

Please Note! These instructions only apply to personally owned Linux computers. UND-issued devices have GlobalProtect installed automatically. If the GlobalProtect icon doesn't appear in the taskbar, please contact UIT for assistance.

The official GlobalProtect VPN Client is only compatible with a few Linux distributions. UIT does not support Linux clients in any way. See the links below for general information on the client, and where to download it.

Anyone using a Linux machine with OpenSSL version 3 will be unable to connect to GlobalProtect unless they manually enable Unsafe Legacy Renegotiation in their OpenSSL configuration. Using Unsafe Legacy Renegotiation may be a security risk. UND takes no responsibility for any security threats the user may face by using this setting.

 

  • Edit the file "/usr/lib/ssl/openssl.cnf"
  • Locate the section "[system_default_sect]" and add the line "Options = UnsafeLegacyRenegotiation" and save your changes
  • Restart the GlobalProtect VPN service (sudo systemctl restart gpd)
  • Connect to GlobalProtect - See the Log In page for steps.

 

Was this helpful?
0 reviews
Print Article