How do I get started with the GlobalProtect Campus VPN?

This FAQ was last modified on: Wednesday, July 22, 2020 05:03pm

 

For COVID-19 ​Continuity:

While the majority of the online instruction systems do not require a VPN connection, many other campus systems do. The Office of Information Technology (OIT) recommends that students use the pilot VPN service, GlobalProtect VPN, which is available at https://vpn.gatech.edu.

Georgia Tech offers a clientless VPN portal, which is recommended for those who only need to reach a specific application (e.g. Canvas, Buzzport, DegreeWorks, etc.) and does not require a VPN client to do so. Review this article "How do I get started with the GlobalProtect Campus VPN?" for everything you need to know about GlobalProtect VPN.

VPN Usage Guidelines

To avoid unnecessary network congestion between campus and your off-campus location and to ensure the best VPN experience, please adhere to the following usage guidelines:

  1. No VPN: Use for any service (such as email, collaboration, cloud file storage, and video conferencing) which can be accessed without a VPN.
  2. Clientless VPN: Use for web-based campus services which require the VPN from off campus and can be accessed directly from vpn.gatech.edu (clientless).  By using this method, services which don't require the VPN (as mentioned above) will continue to work without the VPN while Georgia Tech on-campus services will work through the VPN.
  3. VPN clients : Use for any service that cannot be accessed with no VPN or with the clientless option.

Please refer back to this page for additional guidance as recommendations may change as OIT monitors for load and other factors.

 

Introducing the GlobalProtect Campus VPN Service

 
On This Page:

What is GlobalProtect?

GlobalProtect is a Client and Clientless based remote access VPN solution by Palo Alto Networks. This solution has the potential to offer a higher capacity and higher performance VPN solution over our current production campus VPN service. Please note these caveats with using this service: 

  • This is a new service and students, faculty, and staff are welcome to use it. 
  • Support for this service is limited at this time, though we welcome feedback to help us improve the customer experience.  
  • This service is NOT replacing the existing campus VPN service at this time, but will operate in parallel as we evaluate its features and fine tune its settings. 
  • We are focusing on Windows and macOS clients at this time. Linux, mobile, and 3rd party clients have been tested and do work, but there will be limited support and troubleshooting for customers using these clients.
  • If you have any problems with this new service, please continue to use the existing campus VPN service, which is still in production. 
     

How does GlobalProtect Work? 

GlobalProtect provides remote access in two parts: 

  • A Clientless browser based VPN Portal. Users can connect to vpn.gatech.edu via a web browser and are presented a dashboard with a number of tiles. From here, these tiles link to popular campus websites or a user can enter their own URL. This is also where a customer downloads the GlobalProtect Agent client software. 
  • GlobalProtect Agent. This is the VPN client software that is installed on your computer. You launch it from the Windows taskbar, or the macOS menu bar. The GlobalProtect Agent will first connect to the portal where you will be asked for your credentials, and then you will be directed to one of two GlobalProtect gateways that live in our data centers. 

Getting Started with Clientless VPN (Recommended for Students)

The GlobalProtect Clientless VPN is a web browser based VPN service, and should work with most browsers, operating systems, and mobile devices. All traffic on the browser tab that you use to log in to the service travels through an encrypted tunnel which terminates on the campus gateway. 

  1. In a web browser, connect to vpn.gatech.edu
  2. Enter your username and password in the fields:
     
  3. If you are required to use Duo 2-factor authentication, enter 'push' or a passcode:
  4. You should now be viewing the Clientless VPN interface. You can click on a tile to visit a website or click on the Enter URL button to enter the address for another website. Click on your username at the right to log out.
     

Getting Started with GlobalProtect VPN Client for Windows (Recommended for Faculty or Staff)

  1. Prerequisite! Make sure you disconnect your AnyConnect VPN session and any other VPN software before continuing!
  2. To download the Windows VPN client, follow the instructions above to log into the Clientless VPN portal. 
  3. Once you log into the portal, click on the Download Windows/macOS VPN Client link. 
  4. Now you should see the VPN Client download page. 
  5. Select the Windows GlobalProtect agent appropriate for your system. If you are unsure of which version to use, go to System Settings -> About your PC to see which system type you have. 
  6. For our example we will install the Windows 64 bit GlobalProtect agent. ​
  7. Depending on your browser, you will have the option to run the installer right away, or download and then run the installer. In our example we will click run. ​
  8. You should now see the GlobalProtect setup wizard. ​
  9. Click Next to begin the installation. You may see a User Account Control popup window. Click Yes to continue. ​
  10. You should see this when the installation is complete. Click Close. 
  11. At this time, the GlobalProtect VPN client may have popped up in the lower right hand side of your desktop. If not, click on the taskbar, then click on the grayed out globe. Enter vpn.gatech.edu for the portal address, then click connect. ​
  12. Enter your credentials, and 2nd factor method. ​
  13. When you connect, you will see a welcome banner. 
  14. To Disconnect, open the client from the taskbar and click Disconnect. 
  15. To run the client in the future, you can find it again in the Windows toolbar. Look for the little grey planet: 

     
    Or in the start menu. 

Getting Started with GlobalProtect VPN Client for macOS (Recommended for Faculty or Staff)

  1. Prerequisite! Make sure you disconnect your AnyConnect VPN session and any other VPN software before continuing!
        or     
  2. To download the macOS VPN client, follow the instructions above to log into the Clientless VPN portal. 
  3. Once you log into the portal, click on the Download Windows/macOS VPN Client link. 
     
  4. Click on the download link for Mac 32/64 bit GlobalProtect agent 
  5. From your downloads folder, click on the installer package
  6. Click Continue to start the installation. Click through to select installation location. 
  7. You may be asked to enter your account password to continue installation. 
  8. You may need to allow the system extension in the preferences. You may have only 60 seconds to perform this operation! If you fail to allow this extension quickly, the installation will be broken and you will have to reinstall. 

  9. Once the install is complete, you can find the GlobalProtect client in your menu bar at the top. Enter vpn.gatech.edu into the portal address field. Click Connect. 
  10. Enter your credentials. 
  11. You may be required to use 2-factor authentication. 
  12. Once connected, you will see the welcome screen. Click Disconnect to disconnect. 
  13. To connect using the client in the future, you can find the client in the menu bar at the top. Look for the little grey planet. 
  14. The mac client remains persistent in the menu bar even if you are not connected to the VPN.
    If you wish to quit the client entirely, from a command line type:​
    launchctl unload /Library/LaunchAgents/com.paloaltonetworks.gp.pangp*​
    To launch the client again: 
    launchctl load /Library/LaunchAgents/com.paloaltonetworks.gp.pangp*

 

Getting Started with GlobalProtect VPN Client for iOS

  1. To download the iOS VPN client, access the iOS App Store.
  2. Search for "GlobalProtect".
  3. From the search results, select GlobalProtectTM.
  4. From the GlobalProtect product page, tap GET.
  5. Install the App.
  6. Once installed, open the GlobalProtect App. 
  7. Enter the portal address, "vpn.gatech.edu", and tap Connect.
  8. You will be asked to allow GlobalProtect permissions to add VPN configurations.  Please accept.
  9. At the Sign in page, please use your GT credentials to login.
  10. You may be required to use 2-factor authentication.
  11. Once connected, you will see the welcome screen.  Click Disconnect to disconnect.
  12. To connect using the client in the future, reopen the App.

 

Getting Started with GlobalProtect VPN Client for Android

  1. To download the Android VPN client, access the Google Play Store.
  2. Search for "GlobalProtect".
  3. From the search results, select GlobalProtect.
  4. From the GlobalProtect app product page, tap Install.
  5. Once installed, open the application.
  6. The GlobalProtect application will open and ask for the portal address.  Please use vpn.gatech.edu.
  7. Please enter your username and password credentials.
  8. You may be required to use 2-factor authentication.
  9. When prompted, review and Accept the information for which GlobalProtect needs access.
  10. Once connected, you will see the welcome screen. 
  11. You will see this screen when connected.  To Disconnect, simply tap disconnect.

 

Getting Started with GlobalProtect VPN Client for Chrome OS​

  1. From the Chromebook, search for the app in the Chrome Web Store or go directly to the GlobalProtect app page.
  2. Click Add to Chrome and then follow the prompts to download and install the app.

    1. You will see a prompt detailing the permissions the GlobalProtect application will require, click Add app.
  3. Launch the app.
    1. When successfully installed, the Chrome App Launcher displays the GlobalProtect app icon in the list of apps. To launch the app, click the icon.
  4. The GlobalProtect application will open and ask for the portal address.  Please use vpn.gatech.edu.
  5. To establish a VPN connection, select the vpn.gatech.edu GlobalProtect VPN configuration from Settings > Internet connection > Private network, or use the System Tray.

  6. Please enter your username and password credentials.
  7. You may be required to use 2-factor authentication.
  8. Once connected, the welcome screen will appear. You may close this after reading.
  9. You will see this screen when connected.  To Disconnect, simply tap disconnect.

Troubelshooting

  • Known Issues
    • GlobalProtect Client 5.1 Known Issues
    • When using the GlobalProtect Linux Client, and IPv6 is unavailable, client does not properly connect using IPv4. A case is open with the vendor. 
    • After upgrading to macOS 10.15.4, the following message appears:
       
      "Existing software on your system loaded a system extension signed by “Palo Alto Networks” which will be incompatible with a future version of macOS. Contact the developer for support." Palo Alto states that " This issue is being worked on and will be addressed in an upcoming GlobalProtect App release." GPC-10329
  • Add Lab Portal to GlobalProtect Client

    • We operate a Lab GlobalProtect VPN portal to host newer releases of GlobalProtect Client software and to test out new features and settings. You can add lab.vpn.gatech.edu as a portal in your Client software. This is a lab appliance used for development and as such there is no guarantee of availability or stability. 
    • Click on the hamburger in the top right of the client and select Settings:
    • On the Settings screen, click Add:
    • Add lab.vpn.gatech.edu as a Portal Address and click Save
    • Now you have the option of connecting to the lab portal!