gpclient
GlobalProtect VPN client for Linux
TLDR
SYNOPSIS
gpclient command [options]
DESCRIPTION
gpclient is a Linux client for Palo Alto Networks GlobalProtect VPN, built on top of OpenConnect. It provides both command-line and graphical interfaces for connecting to corporate VPN gateways that use GlobalProtect.The client supports SAML authentication, two-factor authentication, and both portal and gateway connections. It is an open-source alternative to the official GlobalProtect client, which has limited Linux support.
PARAMETERS
connect URL
Connect to GlobalProtect VPN gatewaydisconnect
Disconnect from current VPN sessionlaunch-gui
Open graphical interfacehip
Generate a HIP (Host Integrity Protection) report--fix-openssl
Apply workaround for OpenSSL legacy renegotiation--ignore-tls-errors
Skip TLS certificate validation-g, --gateway URL
Connect directly to this gateway instead of prompting--auto-gateway
Automatically try gateways in priority order without prompting-u, --user USERNAME
Specify username for authentication--browser [BROWSER]
Use external browser for SSO authentication (chrome, firefox, default, or remote)--as-gateway
Treat the server argument as a gateway instead of a portal
INSTALL
CAVEATS
Requires OpenConnect with GlobalProtect support. Some authentication methods (like hardware tokens) may have limited support. The --ignore-tls-errors option should only be used for testing as it bypasses security.
HISTORY
gpclient is part of the GlobalProtect-openconnect project, created as an open-source solution for Linux users needing to connect to GlobalProtect VPNs. It leverages OpenConnect's GlobalProtect protocol support (added in OpenConnect 8.0). The project was rewritten from Python/Qt to Rust and Tauri in its 2.x series.
SEE ALSO
openconnect(8), openvpn(8), nmcli(1)
