I'm Java developer and sometimes I need to test the development using the database of the client. So they give access using Windows and Mac by a program called Palo Alto Global Protect where I need to put my login, password and address of the gateway.

So I tried to configure the settings by myself but I couldn't connect. I asked the support team to configure it, they tried but it doesn't work.

I have one virtual machine using Virtual Box that I can install the program.

So there is one way to get the access to this VPN or configure it?

I'm using Linux Mint.

  • The support team didn't what? didn't reply? As for me the problem is not clear yet. – Mohamad-Jaafar NEHME Jun 25 '15 at 13:02
  • They tried to configure but not worked – Diego Macario Jun 25 '15 at 13:06
  • would you please put some additional information regarding the error you are getting? – Mohamad-Jaafar NEHME Jun 25 '15 at 13:08
  • When I try to connect Linux get me a answer The VPN connection failed The VPN connection failed to start becaus the VPN service failed to start – Diego Macario Jun 25 '15 at 13:12
  • 1
    Sorry for that, I didn't get the problem yet. But why don't you ask Google for this problem! Just search for: The VPN connection failed The VPN connection failed to start because the VPN service failed to start. Either ask Google or provide much more information such as what is your system, client's system ... I hope someone could help you if you provide sufficient information – Mohamad-Jaafar NEHME Jun 25 '15 at 13:20

The thing is that you are not using the official Global Protect client so you need and extra configuration step in the firewall. You need to define X-Auth support (on the firewall) and all related fields.

After that, you can use any SSL VPN Standard client. I confirm it works for me in Linux and IOS (the iphone thing, not the Cisco :P).

This link would be quite useful for you. http://blog.webernetz.net/2014/03/31/palo-alto-globalprotect-for-linux-with-vpnc/

| improve this answer | |
  • I can't change configuration on the Firewall, but I will suggest to the support it. – Diego Macario Jun 25 '15 at 18:41
  • Configuring X-Auth is your only chance of connecting because there are no Linux globalprotect client. If you need official explanation from Palo Alto, send this link to your support team live.paloaltonetworks.com/docs/DOC-5673 – KorXo Jun 25 '15 at 20:15
  • I passed to the support yours suggestion and he told me the X-Auth is configured – Diego Macario Jun 26 '15 at 15:26
  • In this case, the remote job is done. Now, you have to configure your linux side. Check the tutorial pointed out in my answer – KorXo Jun 28 '15 at 20:02
  • I've created my connection by GUI and it connect but when I try to ping one host, don't work. So I created one conf file to test and it worked but the internet connection stopped. – Diego Macario Jun 30 '15 at 9:33

Not the answer you're looking for? Browse other questions tagged or ask your own question.