Have you tried using IPSEC with xauth to connect to Palo Alto Networks Global Protect Gateway on PAN-OS 4.1?

Hypothetically that should work.

-feralpig