GlobalProtect VPN

Option 1: Connecting Your Windows or Mac via Browser

1. From any browser on your PC or Mac type in gateway.colostate.edu into the address bar. We tested Chrome, Edge, Firefox, Safari, and Brave. All worked the same.

2. You will be presented with the CSU NetID log in screen. Enter your NetID and password to authenticate.

 

3. You will be sent to the Duo authentication page. Should you not already have Duo installed, please find instructions here.

4. Once authenticated you will be logged into the secure gateway and can begin conducting your business. (note: links and applications you see may be subject to change)

5. Log out or close the screen to exit the gateway and close the session.

6. Your device is remembered for 24 hours, after that, you will need to reestablish and reauthenticate your VPN connection.

Option 2: Connecting to the GlobalProtect Gateway from your Desktop Application

Note: This option requires the GlobalProtect app to have been installed to your device by CSU IT Staff. If GlobalProtect is not already installed, which you can check by following Step 1 below, see the Install Desktop Agent – Personally Managed Devices section for instructions on installing GlobalProtect manually.

1. From the Start menu search bar, type in GlobalProtect. If the GlobalProtect icon does not display, see the Install Desktop Agent – Personally Managed Devices section to install it manually or contact your IT manager to have it added to your CSU managed device.

2. Enter gateway.colostate.edu for the portal address.

Note: some screens or processes may look different depending on which version of GlobalProtect is in use. 

3. You will need to sign in with your NetID and password.

4. You’ll need to authenticate with Duo.

5. When the connection is successful, the GlobalProtect screen will display as “Connected”. Click “Disconnect” to end the session.

To Use:

PC:

Open the Global Protect application:

From the Start Search bar, search for GlobalProtect, click on the application.

Enter gateway.colostate.edu for the portal address.

Note: some screens or processes may look different depending on which version of GlobalProtect is in use. 

You will need to sign in with your NetID and password.

You’ll need to authenticate with Duo.

When the connection is successful, the GlobalProtect screen will display as “Connected”.   Click “Disconnect” to end the session.

Mac:

Open the Global Protect application:

Click the Globe Icon at the top of the screen and enter gateway.colostate.edu for the portal address.  If the GlobalProtect icon does not display on your top bar, email help@colostate.edu.

Note: some screens or processes may look different depending on which version of GlobalProtect is in use. 

You will need to sign in with your NetID and password.

You’ll need to authenticate with Duo.

When the connection is successful, the GlobalProtect screen will display as “Connected”.   Click “Disconnect” to end the session.

Depending on version of macOS you may receive the following popup message “Filter Network Content”.  If you do, click on Allow to complete the GlobalProtect client/agent installation.

Watch: Install and Use GlobalProtect on a Personal Device (5 min.)

Or follow the text instructions below:

1. From any browser on your PC or Mac type in gateway.colostate.edu into the address bar.

2. You will be presented with the CSU NetID log in screen. Enter your NetID and password to authenticate.

3. You will be sent to the Duo authentication page. Should you not already have Duo installed, please find instructions here.

4. Once authenticated you will be logged into the secure gateway

5. Select Download the GlobalProtect Agent to be presented with the different software download options.

6. This step is specific to your operating system. Select the appropriate download for your device type. If you’re unsure of which agent file to select, contact your local IT support.

7. Select the appropriate file to begin installation.

PC Installation:

The GlobalProtect Setup Wizard will open. Click Next to begin.

Click Next, it’s recommended to use the default download location.

Click Next to confirm the installation.

Click Close to complete the installation on your PC.

GlobalProtect is now installed on your PC device.

Launch the GlobalProtect app – from the Start menu search bar, type in GlobalProtect.

Enter gateway.colostate.edu for the portal address.

Note: some screens or processes may look different depending on which version of GlobalProtect is in use. 

You will need to sign in with your NetID and password.

You’ll need to authenticate with Duo.

When the connection is successful, the GlobalProtect screen will display as “Connected”. Click “Disconnect” to end the session.

Mac Installation:

A pop-up will appear asking if you want to allow downloads on “gateway.colostate.edu”. Click Allow.

The file will be in the download folder.

Click on the GlobalProtect folder to open the files.

Click Install to begin installing the files.

Click Continue to select the Global Protect package to download.

Enter your MacOS/AppleID password.

Click Install Software to continue to process.

Click OK to Enable the system extension.

Click Close, the installation process for your Mac is complete.

GlobalProtect is now installed on your Mac device.

Launch the GlobalProtect app.

Enter gateway.colostate.edu for the portal address.

Note: some screens or processes may look different depending on which version of GlobalProtect is in use. 

You will need to sign in with your NetID and password.

You’ll need to authenticate with Duo.

When the connection is successful, the GlobalProtect screen will display as “Connected”. Click “Disconnect” to end the session.

Watch Video:

Install and Use GlobalProtect on iOS devices (2 min.)

Or follow the text instructions below

To Install:

1. Select the Apple App Store from your device

2. Enter “GlobalProtect” in the search box

3. Select the GlobalProtect Icon and click the download icon.

4. Select “Open” once downloaded

5. You want to Allow notifications.

6. Enter the portal address: gateway.colostate.edu

7. Allow VPN Configuration

8. Enter your CSU NetID and password

9. You will be required to authenticate through DUO. Should you not already have Duo installed, please find instructions here.

10. You are now connected to the GlobalProtect VPN service.  Tap the green shield to disconnect.

To Use:

Open the GlobalProtect application from your device

Tap to Connect

Enter your NetID and password (if prompted)

Authenticate with Duo (if prompted)

Tap the green shield icon to end session

The app will state the connection is successful and you may begin browsing. While GlobalProtect is enabled, any application you use or site you visit will be securely routed through the VPN service.

Watch Video:

Install and Use GlobalProtect on Android devices (2 min.)

Or follow the text instructions below.

To Install:

1. Select the Google Play store from your device

2. Enter GlobalProtect in the search bar

3. Install the GlobalProtect App

4. Once installed, select Open

5. The GlobalProtect PaloAlto Networks blue install screen will appear

6. Enter the address: gateway.colostate.edu and select Connect

7. You will enter your NetID and password

8. You will authenticate with Duo. Should you not already have Duo installed, please find instructions here.

9. If the login was successful, you will receive one of the following screens depending on your device brand.

To Use:

Tap GlobalProtect icon to open

Select Tap To Connect

Enter your NetID and password (if prompted)

Authenticate with Duo (if prompted)

The app will state the connection is successful and you may begin browsing. While GlobalProtect is enabled, any application you use or site you visit will be securely routed through the VPN service.

A VPN is a Virtual Private Network.  It’s a secure tunnel that allows you to connect to CSU resources and software through the internet when you are not on campus.  This tunnel preserves privacy, prevents unauthorized access, and keeps the work you are doing on that device secure.  At CSU we use GlobalProtect as our VPN service.

To learn more about VPNs, their uses and protections they offer, you can watch What is a VPN and Why Should You Use One? by VPN Overview.

Watch the video: GlobalProtect Client/Agent vs. Web Portal: How to Use and Why it’s Better to Use the Client

The GlobalProtect web portal (browser) is set up to access a set of defined applications configured for application URLs.  It is a static configuration and cannot be modified by the user.  The web portal is recommended for users who only need to access resources such as TimeClock Plus or links from the aar.is.colostate.edu website. 

The GlobalProtect client/agent is a VPN tunnel configured to access all resources on campus.  When connecting via the client/agent, you will receive a CSU IP address and will be on the CSU network.  You will be able to perform functions such as accessing internal CSU websites, remote terminal or desktop sessions, and other resources not publicly available.  It is important to note that the VPN is configured as a split tunnel, so resources on the public internet are accessed through your ISP, not through CSU’s network. 

For these reasons, we recommend using the GlobalProtect desktop client/agent unless you are accessing TimeClock Plus or AAR.IS.colostate.edu and links from that site. 

First, access the OneDrive folder that contains all current Linux installers supported by CSU’s VPN environment. Click “Download”.

Once you have downloaded this package, install GlobalProtect by following the instructions on Palo Alto’s website. Note: If you don’t want the GUI version, skip steps 2 and 3 of the GUI instructions, and go to step 2 of the CLI instructions.

For compatibility questions, users can consult the Palo Alto Compatibility Matrix.

When launching the GlobalProtect app for the first time on a new device, it will prompt you for the portal address. Enter gateway.colostate.edu and click Connect.

1. From the system tray, click GlobalProtect to open it.
2. In the top right, click the  icon and select Settings > General.
3. Under Portals, click gateway.colostate.edu to select it, then click Delete.
   
4. In the upper right, click the X to close the window.
5. Go back to your system tray and click GlobalProtect to open it.
6. When prompted for a portal address, enter gateway.colostate.edu, then click Connect.
   
7. When prompted, enter your NetID and password, then confirm your identity with Duo two-factor authentication. You will then be connected to GlobalProtect.

Disable iPv6

If you are having trouble resolving connection issues, you may need to disable iPv6:

• Windows:
  • Go to “Settings” > “Network & Internet” > “Status”
  • Select “Change adapter options”
  • Right click on your active network adapter (Ethernet or Wi-Fi) and select “Properties”
  • In the Properties window, scroll down until you see “Internet Protocol Version 6 (TCP/IPv6)”. Uncheck the “Internet Protocol Version 6 (TCP/IPv6)” checkbox to disable IPv6.
  • Click on “OK” to save the changes and then restart your PC.

Additional Support

If you have questions about using GlobalProtect, please reach out to your college or department’s IT support. If you are unsure of who your support contact is, contact the Central IT Help Desk at help@colostate.edu or (970) 491-7276. 

The session may timeout after 3 hours if the device goes idle, is locked, or goes to a low-power mode. The maximum session length is 24 hours with continued use.

Currently, there is no warning letting you know that you will be disconnected or option to extend the session.  A feature request has been submitted to the vendor to add this type of notification. 

You will have to authenticate each time you connect to GlobalProtect through the desktop agent/client.

When you have a laptop configured to go to sleep after a period of inactivity or hibernate when the lid is closed, many systems will also put their network adapters into a power-saving mode. To address this, you may need to adjust your power and sleep settings. Under Control Panel / Power Options, select Edit Plan Settings, then Advanced Settings. Find and expand the Wireless Adapter Settings, and ensure it is set to Maximum Performance for both On battery and Plugged in.

The GlobalProtect icon on Windows computers appears in the notifications (bottom right) area of the screen.  Windows computers sometimes hide the icon.  To make it always show, open the Start menu and type  “taskbar icons” to search then choose “Select which icons appear on the taskbar.”

Next, locate ” GlobalProtect client” and turn it On .

 

The GlobalProtect icon will then appear in the bottom right area of the screen:

No, the GlobalProtect web portal is only for resources that can be accessed via an application URL. 

No, the GlobalProtect web portal is only for resources that can be accessed via an application URL.  At this time, use the GlobalProtect client/agent to access remote or terminal sessions. 

No, the applications are configured at a system level and users cannot add or remove applications or icons.

If you have questions about using GlobalProtect, please reach out to your college or department’s IT support.

If you are unsure of who your support contact is, contact the Central IT Help Desk at help@colostate.edu or (970) 491-7276.