GlobalProtect-openconnect is an open-source VPN client that connects to Palo Alto Networks GlobalProtect gateways using OpenConnect. It supports macOS, Linux, FreeBSD, and OpenBSD through a graphical desktop application and command-line interface. Users can authenticate through single sign-on, multifactor authentication, FIDO2 security keys, or client certificates. Browser-based authentication allows users to complete login through their preferred web browser. The application supports multiple VPN portals and gateways, including direct gateway connections. Automatic connection at system startup and system tray controls simplify everyday VPN management. Command-line tools provide connection management, diagnostic logging, and Host Information Profile report generation. Built with Rust and Tauri, it offers an alternative to proprietary GlobalProtect clients.
Features
- Cross-platform GlobalProtect VPN connectivity through the OpenConnect protocol
- Single sign-on and multifactor authentication with FIDO2 security key support
- Client certificate authentication and external browser-based login workflows
- Multiple VPN portal management with direct gateway connection capabilities
- Automatic VPN connection at startup with convenient system tray controls
- Graphical desktop interface and command-line tools with HIP report generation