Palo Alto GlobalProtect VPN Install and Setup – Windows desktop

Requirements

• Laptop or desktop computer system running Windows 10 or later with administrator account or credentials for install (Contact CITE support @ 903-468-6000 for all other client systems)
• Active Directory account.   Note:   Global Protect, TAMUC’s SSO, and the former Cisco VPN all use the same authentication backend.
• Duo account provisioned for Push operation to your mobile device. Login via the VPN is not possible without setting up Duo Push.   If you have not already provisioned Duo for your TAMUC credentials, navigate to https://appsprod.tamuc.edu/uportalapps/duodevmgtportal to get started.
• Network access to the TAMUC network from either external or internal location.

Installation Procedure:

1. Boot and log into system using an appropriate account.
2. Verify Internet access for external systems or local access for internal systems.  For internal systems note the IP address assigned.  For more information on finding your system’s IP address, see Appendix A at the end of this article.
3. Launch a browser and navigate to https://ra.tamuc.edu.  For on-campus computers with IP addresses beginning with 10.28 use https://ra-vlan28.tamuc.edu.
4. From the GlobalProtect portal login page, enter your TAMUC Active Directory credentials as shown below.  Do not prepend the username with any text such as “ctis\”.

5. After a successful login, the GlobalProtect portal will display a web page with three download links.  Select the download link appropriate for your system.  If you are not sure which version of windows are you running, see Appendix A at the end of this article.  If you are not using of the listed systems contact CITE support at 903-468-6000.  Do Not download the GlobalProtect App available from the Microsoft Store.

6. One of the following icons should appear in your selected download location.  Double click to start the installation and click through the prompts that appear.  You may close the browser window or tab you opened earlier as it is no longer needed. 

7. When the installation is complete a new icon should appear on the tray at the lower right part of the task bar as shown highlighted in yellow below. Note: the highlighting will not appear on your system.

8. Clicking on this icon will bring up the “Connect” dialog box.

9. Enter the same GlobalProtect portal address used in step 3.  Do not use the https:// prefix on this step.   Press the “Connect” button.  This GlobalProtect portal address will remain set for repeated use.
10. You will be prompted for credentials.  Use the same credentials from step 4.  Do not prepend the username with any text such as “ctis\”.  Note that it is not necessary to capitalize any letters in the username.
11. You will receive a Duo Push request on your mobile device.  It must be approved within 60 seconds.  Note:  If Badges or Alerts are disabled for the Duo app, you will need to open the app on your device to approve the connection.
12. Once you are successfully logged in you will see the following confirmation:

13. The system is ready for use.