Body
The GlobalProtect VPN application allows access to protected campus resources (like Mentor) from off campus locations or from the Guest wireless network. It may also be required to access other specialized, restricted network services or software. This guide will go through the steps to install, configure, and connect to GlobalProtect VPN (as well as set up Duo Two Factor Authentication if you have not already done that).
Audience
This article is intended for: faculty, staff, students, and college affiliates.
Platform
Microsoft Windows, Apple MacOS
If you are looking for instructions how how to use GlobalProtect on a Chromebook.
Contents
- Install the GlobalProtect VPN
- Configure VPN
- Full tunnel VPN configuration
- Set up Duo Two Factor Authentication
- Uninstall the GlobalProtect VPN
Install GlobalProtect VPN
- Connect to https://vpn.ithaca.edu on the computer you would like to install the VPN application.
- Log in to the portal with your full Ithaca College email and password.
- Click the link to download the appropriate GlobalProtect application for the Windows or Mac computer. Most machines are either 64-bit Windows or 32/64-bit Mac computers.
- Run the downloaded installer.
- Leave the default options selected as you proceed through the installation.
- You may delete the install package once complete, if prompted.
Configure GlobalProtect
- Open the GlobalProtect client from the notification area. (It is a small white globe when not connected)
Note: if on you are on MacOS High Sierra (10.13) or later, you will need to complete a few additional steps, you may also see the following notification after installation:
![Screenshot of MacOS "System Extension Blocked" notification indicating that an extension by Palo Alto Networks was blocked from running.](https://help.ithaca.edu/TDPortal/Images/Viewer?fileName=02e0218e-63b9-48ee-bafd-5a0c132475e9.png)
a. Open System Preferences.
b. Click on Security & Privacy.
c. Unlock the padlock to make changes if it is locked. at the bottom of the window.
d. Above the padlock, there will be a message to allow software from Palo Alto Networks to run. Click Allow.
![Screenshot of MacOS notification that software from Palo Alto Networks was blocked, with a button to allow this software to run on the right side of the image.](https://help.ithaca.edu/TDPortal/Images/Viewer?fileName=80b59544-639b-4bac-8080-6dadebfe2da2.png)
- Fill in the Portal Address: vpn.ithaca.edu
- This is our full-tunnel vpn, so when you're connected all your traffic to any destination will be encrypted, flow through our VPN gateway, and be logged.
- This is good for most purposes, but see the instructions below for our split-tunnel VPN alternative.
- Click Connect, and a new window should pop up where you can enter your full Ithaca email and password.
- Authenticate with DUO using your preferred method. Duo now offers the ability to connect using the "Call Me" option as well as the "Send me a Push", and you can allow DUO to remember you for 90 days.
- Once connected, the GlobalProtect VPN icon will change to a globe with a check mark.
Alternative: Configuring the Split-Tunnel VPN
While the regular VPN tunnel should meet most needs, there may be times where you would prefer that non-IC related network traffic not be routed through the IC network.
On VPN versions earlier than 4.1:
1.) Change the portal from vpn.ithaca.edu to vpnsplit.ithaca.edu and connect.
On VPN client versions 4.1 and later:
1.) Click on the GlobalProtect icon in your system tray
2.) Click on the gear in the top right, and select Settings
3.) Under Portals, Click Add, and type: vpnsplit.ithaca.edu
4.) This should now be selectable as a portal choice on the drop down on the main connection screen
Duo Setup
Duo is a Two Factor Authentication Service which we use to provide additional security to some applications (such as the VPN). Additional information about Duo is available at www.ithaca.edu/duo.
Uninstall GlobalProtect VPN
- Connect to https://vpn.ithaca.edu on the computer you would like to install the VPN application.
- Log in to the portal with your Netpass username and password.
- Click the link to download the appropriate GlobalProtect application for the Windows or Mac computer. Most machines are either 64-bit Windows or 32/64-bit Mac computers.
- Choose "Remove GlobalProtect"
- Click Finish
Allow your computer to make changes.