gpclient

GlobalProtect VPN client for Linux

TLDR

Connect to a GlobalProtect VPN using a portal server

$ gpclient connect [vpn_gateway_url]

Disconnect from the currently connected VPN server

$ gpclient disconnect

Launch the graphical user interface for VPN management

$ gpclient launch-gui

Generate a HIP report (Host Integrity Protection)

$ gpclient hip

Use OpenSSL workaround to bypass legacy renegotiation errors

$ gpclient connect --fix-openssl [vpn_gateway_url]

Ignore TLS errors during connection

$ gpclient connect --ignore-tls-errors [vpn_gateway_url]

Display version

$ gpclient --version

Display help for any command

$ gpclient help [command]

gpclient is a Linux client for Palo Alto Networks GlobalProtect VPN, built on top of OpenConnect. It provides both command-line and graphical interfaces for connecting to corporate VPN gateways that use GlobalProtect.The client supports SAML authentication, two-factor authentication, and both portal and gateway connections. It is an open-source alternative to the official GlobalProtect client, which has limited Linux support.

PARAMETERS

connect URL

Connect to GlobalProtect VPN gateway

disconnect

Disconnect from current VPN session

launch-gui

Open graphical interface

hip

Generate a HIP (Host Integrity Protection) report

--fix-openssl

Apply workaround for OpenSSL legacy renegotiation

--ignore-tls-errors

Skip TLS certificate validation

-g, --gateway URL

Connect directly to this gateway instead of prompting

--auto-gateway

Automatically try gateways in priority order without prompting

-u, --user USERNAME

Specify username for authentication

--browser [BROWSER]

Use external browser for SSO authentication (chrome, firefox, default, or remote)

--as-gateway

Treat the server argument as a gateway instead of a portal

INSTALL

nix profile install nixpkgs#gpclient

CAVEATS

Requires OpenConnect with GlobalProtect support. Some authentication methods (like hardware tokens) may have limited support. The --ignore-tls-errors option should only be used for testing as it bypasses security.

HISTORY

gpclient is part of the GlobalProtect-openconnect project, created as an open-source solution for Linux users needing to connect to GlobalProtect VPNs. It leverages OpenConnect's GlobalProtect protocol support (added in OpenConnect 8.0). The project was rewritten from Python/Qt to Rust and Tauri in its 2.x series.

RESOURCES

Source code