Globalprotect Client Command Line

 admin

Installing GlobalProtect GUI To use the GlobalProtect graphic user interface, you need Ubuntu 18.04 LTS. To install and use the command line interface, see page 4. Download the client and go to your Downloads folder. Run the following command: tar -xvf PanGPLinux-5.2.5-c10.tgz 3. Run the Is command to ensure that the “GlobalProtectUI. Hosting the GlobalProtect portal and go to the GlobalProtect Client page. Select Device GlobalProtect Client. Step 2 Check for new agent software images. If the firewall has access to the Update Server, click Check Now to check for the latest updates. If the value in the Action column is Download it indicates that an update is available. GlobalProtect client is a lower version than the VPN server; The C: Windows Temp postupdt.bat file does not exist which is should not if an update has not been run recently. Create C: Windows Temp postupdt.bat with the following contents. The first line should be the arbitrary command to execute.

VPN provides you with secure access to University services and the Internet when you are off-campus. Northwestern is transitioning to a new VPN platform called GlobalProtect. GlobalProtect replaces three existing VPN clients: built-in VPN clients, Cisco AnyConnect, and Pulse Secure SSL VPN. For details on the transition, see https://www.it.northwestern.edu/about/it-projects/vpn-migration-2019/overview.html. Please note that if you are a member of the Feinberg School of Medicine, you will continue to use your built-in VPN client.
The portal address for GlobalProtect is vpn-connect.northwestern.edu.
GlobalProtect requires you to authenticate with your NetID and NetID password and Duo multi-factor authentication. If you need to register a phone for multi-factor authentication, see Registering and managing your devices for Duo multi-factor authentication.

GlobalProtect for macOS

If your University-owned computer is managed by your department, you may not need to set up GlobalProtect. If you see the GlobalProtect icon () in your menu bar, skip the set-up instructions and go directly to connect to GlobalProtect.

Set up GlobalProtect

Note that your Mac must be running macOS Catalina (10.15), Mojave (10.14), High Sierra (10.13), or Sierra (10.12).
  1. Go to https://chocolate.ci.northwestern.edu/Software/Titles/NU_Global_Protect/5.1.4/MacOS/GlobalProtect-5.1.4.pkg to download the GlobalProtect installation package.
  2. Within your computer's Downloads folder, double-click the downloaded file to begin installation. When prompted, click Continue, then click Install.
  3. If you see a prompt about a PaloAlto system extension being blocked, click Open Security Preferences.
    1. Click Allow, then close your preferences window.
    2. If prompted, enter your computer's administrative user name and password, then click Install Software. If you don't have administrative rights to your University-owned computer, contact your departmental tech support personnel.
    3. Restart your Mac.
  4. When the installation finishes, you will be prompted to move the installer the trash.
  5. You will then be prompted asking for your keychain password. Enter your password and choose Always Allow.
  6. Click Close. Once installation is complete, GlobalProtect will appear in your menu bar at the top of your macOS desktop.

Connect to GlobalProtect

  1. Click the GlobalProtect icon in the menu bar, enter portal address vpn-connect.northwestern.edu, then click Connect.
  2. When prompted, enter your NetID and NetID password, then confirm your identity with Duo multi-factor authentication. You will then be connected to GlobalProtect.
  3. To disconnect, click the GlobalProtect icon again, then click Disconnect.

GlobalProtect for Windows

If your University-owned computer is managed by your department, you may not need to set up GlobalProtect. If you see the GlobalProtect icon () in your system tray, skip the set-up instructions and go directly to connect to GlobalProtect.

Set up GlobalProtect

Note that your computer must be running Windows 7 or later. If you don't have administrative rights to your University-owned computer to install software, contact your departmental tech support personnel.
  1. Go to https://chocolate.ci.northwestern.edu/Software/Titles/NU_Global_Protect/5.1.4/Windows/GlobalProtect64-5.1.4.msi to download the GlobalProtect installation package.
  2. From your computer's Downloads folder, double-click the installer, then click Next to follow the installation instructions.
  3. When prompted for a portal address, enter vpn-connect.northwestern.edu.
  4. Once installation is complete,
    • GlobalProtect will appear in the lower left area of your system tray.
    • GlobalProtect will automatically prompt you to connect to VPN.

Connect to GlobalProtect

  1. Click the GlobalProtect icon in the system tray, then click Connect. If nothing seems to happen when you click Connect, see Fixing when clicking Connect in GlobalProtect VPN for Windows does nothing.
  2. When prompted, enter your NetID and NetID password, then confirm your identity with Duo multi-factor authentication. You will then be connected to GlobalProtect.
  3. To disconnect, click the GlobalProtect icon again, then click Disconnect.

GlobalProtect for iOS (iPhone and iPad)

Set up GlobalProtect

Note that your device must be running iOS 10 or later.
  1. From the App Store, find and download GlobalProtect
  2. When you open the app, you will be prompted for a portal address. Enter vpn-connect.northwestern.edu.
  3. When prompted to allow GlobalProtect to set up a VPN configuration, tap Allow.

Connect to GlobalProtect VPN

  1. Open GlobalProtect and tap Connect.
  2. When prompted, enter your NetID and NetID password, then confirm your identity with Duo multi-factor authentication. You will then be connected to GlobalProtect.
  3. To disconnect, open GlobalProtect again, then tap Disconnect.

GlobalProtect for Android

Set up GlobalProtect

Note that your device must be running Android v5.0 or later.
  1. From Google Play, find and download GlobalProtect
  2. When you open the app, you will be prompted for a portal address. Enter vpn-connect.northwestern.edu.
  3. When prompted to allow GlobalProtect to set up a VPN connection, tap OK.

Connect to GlobalProtect VPN

  1. Open GlobalProtect and tap Connect.
  2. When prompted, enter your NetID and NetID password, then confirm your identity with Duo multi-factor authentication. You will then be connected to GlobalProtect.
  3. To disconnect, open GlobalProtect again, then tap Disconnect.
Command

GlobalProtect for Linux

Supported Linux versions

Because Northwestern's GlobalProtect requires Duo Mobile multi-factor authentication (MFA), only GUI versions of the GlobalProtect can be used on Linux systems. You cannot use the command line (CLI) interface. Given that requirement, these Linux versions are the only supported operating systems:
  • Ubuntu 18.04.3 LTS
  • Ubuntu 18.04.2 LTS
  • Ubuntu 19.04
  • Red Hat Enterprise Linux 7.0 - 7.7
  • CentOS 7.0 - 7.7

Set up GlobalProtect

  1. Download the GlobalProtectinstallation package for your Linux system.
    • RHEL 7/centOS: https://chocolate.ci.northwestern.edu/Software/Titles/NU_Global_Protect/5.2.4/Linux/GlobalProtect_UI_rpm-5.2.4.0-14.rpm
    • Ubuntu/Debian: https://chocolate.ci.northwestern.edu/Software/Titles/NU_Global_Protect/5.2.4/Linux/GlobalProtect_UI_deb-5.2.4.0-14.deb
  2. Open the terminal on your device and install GlobalProtect. Note that the commands may vary depending on your version of Linux.
    • RHEL 7/centOS CLI commands:
      yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
      yum localinstall --nogpgcheck GlobalProtect_UI_rpm-5.2.4.0-14.rpm
    • Ubuntu/Debian CLI commands:
      sudo apt-get install libqt5webkit5
      sudo dpkg -i GlobalProtect_UI_deb-5.2.4.0-14.deb
  3. When prompted for a portal address, enter vpn-connect.northwestern.edu.
  4. Once installation is complete, GlobalProtect will appear in your menu bar at the top of your Linux system.

Connect to GlobalProtect

  1. Click the GlobalProtect icon in the menu bar, enter the portal address (vpn-connect.northwestern.edu), then click Connect.
  2. When prompted, enter your NetID and NetID password, then confirm your identity with Duo multi-factor authentication. You will then be connected to GlobalProtect.
  3. To disconnect, click the GlobalProtect icon again, then click Disconnect.
  4. If you are not seeing the Global Protect icon in your menu bar, there is a CLI command to bring it up:
    1. On the terminal prompt, enter 'globalprotect launch-ui' (NOTE: It may take longer than expected to see the Online Passport page to appear in the next step)
    2. This will bring up the windows above
    3. You can use this if you need to connect and don't see the icon, or to bring up the icon when you need to disconnect.

Globalprotect Client Command Line Tutorial

GlobalProtect for ChromeOS

Set up GlobalProtect

  1. Go to the Google Play Store to download the GlobalProtect installation package.
  2. Open the installer, then follow the installation instructions.
  3. When prompted for a portal address, enter vpn-connect.northwestern.edu.
  4. Once installation is complete, GlobalProtect will automatically prompt you to connect to VPN.

Connect to GlobalProtect

  1. Open GlobalProtect and click Connect.
  2. When prompted, enter your NetID and NetID password, then confirm your identity with Duo multi-factor authentication.
  3. When the Connection request message appears, click OK to make a VPN connection on your device.

See Also:

Palo Alto Globalprotect Client Command Line

For additional assistance please contact the IT Support Center at 847-491-4357 (1-HELP) or via email at consultant@northwestern.edu.

HELP FILE

How to check the timeout and cookie settings in Palo Alto Network VPN?

Globalprotect Vpn Client Command Line

Globalprotect

Log in to the Palo Alto server from the command line interface (CLI) with administrator rights and use the configure command to use the configuration mode.

Checking the timeout settings

Run the show shared server-profile radius command to check the RADIUS timeout settings. The following output appears:

Run the show deviceconfig setting global-protect command to check the GlobalProtect connection timeout settings. The following output appears:

Checking the cookie settings

Run the show global-protect global-protect-portal <Global Protect portal name> client-config configs <Global Protect portal agent name> authentication-override command to check the GlobalProtect Portal cookie generation settings. The following output appears:

Run the show global-protect global-protect-gateway <Global Protect gateway name> remote-user-tunnel-configs <Global Protect portal Agent Clients Configs name> authentication-override command to check the GlobalProtect Gateway cookie acceptance settings. The following output appears:

The following image shows an example of the CLI output: