GlobalProtect VPN

CSU provides secure off-campus access to on-campus resources via the GlobalProtect gateway, also known as a Virtual Private Network (VPN).  GlobalProtect VPN provides a secure and encrypted tunnel between your device and the CSU network that enforces the use of recent, more secure operating system versions.  The VPN is reachable via the GlobalProtect desktop client or via the web interface (Fort Collins: gateway.colostate.edu | Pueblo: pueblogateway.colostate.edu). 

Installing & Using GlobalProtect

  • Connect via Browser or Install Desktop Agent – PC & Mac

    Option 1: Connecting Your Windows or Mac via Browser

    1. From any browser on your PC or Mac type in gateway.colostate.edu into the address bar. We tested Chrome, Edge, Firefox, Safari, and Brave. All worked the same.

    Screenshot of browser URL gateway.colostate.edu

    2. You will be presented with the CSU NetID log in screen. Enter your NetID and password to authenticate.

    Screenshot of NetID Login page

     

    3. You will be sent to the Duo authentication page. Should you not already have Duo installed, please find instructions here.

    Duo Authentication Screenshot

    4. Once authenticated you will be logged into the secure gateway and can begin conducting your business. (note: links and applications you see may be subject to change)

    Gateway.colostate.edu Home Screenshot

    5. Log out or close the screen to exit the gateway and close the session.

    Gateway.colostate.edu Log-Out Screenshot

    6. Your device is remembered for 24 hours, after that, you will need to reestablish and reauthenticate your VPN connection.

    Option 2: Connecting to the GlobalProtect Gateway from your Desktop Application

    Note: This option requires the GlobalProtect app to have been installed to your device by CSU IT Staff. If GlobalProtect is not already installed, which you can check by following Step 1 below, see the Install Desktop Agent – Personally Managed Devices section for instructions on installing GlobalProtect manually.

    1. From the Start menu search bar, type in GlobalProtect. If the GlobalProtect icon does not display, see the Install Desktop Agent – Personally Managed Devices section to install it manually or contact your IT manager to have it added to your CSU managed device.

    GlobalProtect Start Menu Search Screenshot

    2. Enter gateway.colostate.edu for the portal address.

    GlobalProtect Client Enter Portal Address Screenshot

    Note: some screens or processes may look different depending on which version of GlobalProtect is in use. 

    3. You will need to sign in with your NetID and password.

    Screenshot of NetID Login page

    4. You’ll need to authenticate with Duo.

    Duo Authentication Screenshot

    5. When the connection is successful, the GlobalProtect screen will display as “Connected”. Click “Disconnect” to end the session.

    GlobalProtect Client Connected Screenshot

  • Using the Desktop Agent – PC & Mac

    To Use:

    PC:

    Open the Global Protect application:

    From the Start Search bar, search for GlobalProtect, click on the application.

    GlobalProtect Start Menu Search Screenshot

    Enter gateway.colostate.edu for the portal address.

    GlobalProtect Client Enter Portal Address Screenshot

    Note: some screens or processes may look different depending on which version of GlobalProtect is in use. 

    You will need to sign in with your NetID and password.

    Screenshot of NetID Login page

    You’ll need to authenticate with Duo.

    Duo Authentication Screenshot

    When the connection is successful, the GlobalProtect screen will display as “Connected”.   Click “Disconnect” to end the session.

    GlobalProtect Client Connected Screenshot

    Mac:

    Open the Global Protect application:

    Click the Globe Icon at the top of the screen and enter gateway.colostate.edu for the portal address.  If the GlobalProtect icon does not display on your top bar, email help@colostate.edu.

    GlobalProtect Mac Enter Portal Address Screenshot

    Note: some screens or processes may look different depending on which version of GlobalProtect is in use. 

    You will need to sign in with your NetID and password.

    Screenshot of NetID Login page

    You’ll need to authenticate with Duo.

    GlobalProtect Mac Agent Authenticate with Duo Screenshot

    When the connection is successful, the GlobalProtect screen will display as “Connected”.   Click “Disconnect” to end the session.

    GlobalProtect Mac Agent Connected Screenshot

    Depending on version of macOS you may receive the following popup message “Filter Network Content”.  If you do, click on Allow to complete the GlobalProtect client/agent installation.

    GlobalProtect Mac Agent Filter Network Content Pop-Up

  • Install the Desktop Agent – Personally Managed Devices

    Watch: Install and Use GlobalProtect on a Personal Device (5 min.)

    Or follow the text instructions below:

    1. From any browser on your PC or Mac type in gateway.colostate.edu into the address bar.

    Screenshot of browser URL gateway.colostate.edu

    2. You will be presented with the CSU NetID log in screen. Enter your NetID and password to authenticate.

    Screenshot of NetID Login page

    3. You will be sent to the Duo authentication page. Should you not already have Duo installed, please find instructions here.

    Duo Authentication Screenshot

    4. Once authenticated you will be logged into the secure gateway

    Gateway.colostate.edu Home Screenshot

    5. Select Download the GlobalProtect Agent to be presented with the different software download options.
    GlobalProtect Download Desktop Agent Screenshot

    6. This step is specific to your operating system. Select the appropriate download for your device type. If you’re unsure of which agent file to select, contact your local IT support.

    GlobalProtect Client Software Downloads Screenshot

    7. Select the appropriate file to begin installation.

    PC Installation:

    The GlobalProtect Setup Wizard will open. Click Next to begin.

    GlobalProtect PC Setup Wizard Welcome Screenshot

    Click Next, it’s recommended to use the default download location.

    GlobalProtect PC Setup Wizard Select Folder Screenshot

    Click Next to confirm the installation.

    GlobalProtect PC Setup Wizard Confirm Install Screenshot

    Click Close to complete the installation on your PC.

    GlobalProtect PC Setup Wizard Complete Screenshot

    GlobalProtect is now installed on your PC device.

    Launch the GlobalProtect app – from the Start menu search bar, type in GlobalProtect.

    GlobalProtect Start Menu Search Screenshot

    Enter gateway.colostate.edu for the portal address.

    GlobalProtect Client Enter Portal Address Screenshot

    Note: some screens or processes may look different depending on which version of GlobalProtect is in use. 

    You will need to sign in with your NetID and password.

    Screenshot of NetID Login page

    You’ll need to authenticate with Duo.

    Duo Authentication Screenshot

    When the connection is successful, the GlobalProtect screen will display as “Connected”. Click “Disconnect” to end the session.

    GlobalProtect Client Connected Screenshot

    Mac Installation:

    A pop-up will appear asking if you want to allow downloads on “gateway.colostate.edu”. Click Allow.

    GlobalProtect Mac Allow Download Screenshot

    The file will be in the download folder.

    GlobalProtect Mac Download

    Click on the GlobalProtect folder to open the files.

    GlobalProtect Mac Install Downloads Folder Screenshot

    Click Install to begin installing the files.

    GlobalProtect Mac Install Start Screenshot

    Click Continue to select the Global Protect package to download.

    GlobalProtect Mac Install Package Selection Screenshot

    Enter your MacOS/AppleID password.

    GlobalProtect Mac Install Enter Password Screenshot

    Click Install Software to continue to process.

    GlobalProtect Mac Install Software Screenshot

    Click OK to Enable the system extension.

    GlobalProtect Mac Install Enable System Extension Screenshot

    Click Close, the installation process for your Mac is complete.

    GlobalProtect Mac Install Success Screenshot

    GlobalProtect is now installed on your Mac device.

    Launch the GlobalProtect app.

    Enter gateway.colostate.edu for the portal address.

    GlobalProtect Client Enter Portal Address Screenshot

    Note: some screens or processes may look different depending on which version of GlobalProtect is in use. 

    You will need to sign in with your NetID and password.

    Screenshot of NetID Login page

    You’ll need to authenticate with Duo.

    Duo Authentication Screenshot

    When the connection is successful, the GlobalProtect screen will display as “Connected”. Click “Disconnect” to end the session.

    GlobalProtect Client Connected Screenshot

  • Install & Use the Mobile App – iOS Devices

    Watch Video:

    Install and Use GlobalProtect on iOS devices (2 min.)

    Or follow the text instructions below

    To Install:

    1. Select the Apple App Store from your device

    iOS App Store Icon

    2. Enter “GlobalProtect” in the search box

    GlobalProtect App Store Search Screenshot

    3. Select the GlobalProtect Icon and click the download icon.

    GlobalProtect App Store Download Icon Screenshot

    4. Select “Open” once downloaded

    GlobalProtect App Store Open Button Screenshot

    5. You want to Allow notifications.

    GlobalProtect App Allow Notifications Pop-Up

    6. Enter the portal address: gateway.colostate.edu

    GlobalProtect App Enter Portal Address Screenshot

    7. Allow VPN Configuration

    GlobalProtect App VPN Configuration Pop-Up

    8. Enter your CSU NetID and password

    Screenshot of NetID Login page

    9. You will be required to authenticate through DUO. Should you not already have Duo installed, please find instructions here.

    Duo Prompt Mobile

    10. You are now connected to the GlobalProtect VPN service.  Tap the green shield to disconnect.

    GlobalProtect App iPhone Connected Screenshot

    To Use:

    Open the GlobalProtect application from your device

    GlobalProtect App Icon

    Tap to Connect

    GlobalProtect App Tap to Connect Screenshot

    Enter your NetID and password (if prompted)

    Screenshot of NetID Login page

    Authenticate with Duo (if prompted)

    Duo Prompt Mobile

    Tap the green shield icon to end session

    GlobalProtect App iPad Connected Screenshot

    The app will state the connection is successful and you may begin browsing. While GlobalProtect is enabled, any application you use or site you visit will be securely routed through the VPN service.

  • Install & Use the Mobile App – Android Devices

    Watch Video:

    Install and Use GlobalProtect on Android devices (2 min.)

    Or follow the text instructions below.

    To Install:

    1. Select the Google Play store from your device

    Google Play Store Icon

    2. Enter GlobalProtect in the search bar

    GlobalProtect Play Store Search Screenshot

    3. Install the GlobalProtect App

    GlobalProtect Play Store App Install Screenshot

    4. Once installed, select Open

    GlobalProtect Android App Play Store Open Screenshot

    5. The GlobalProtect PaloAlto Networks blue install screen will appear

    GlobalProtect Android App Loading Screen

    6. Enter the address: gateway.colostate.edu and select Connect

    GlobalProtect Android App Enter Portal Address screenshot

    7. You will enter your NetID and password

    Screenshot of NetID Login page

    8. You will authenticate with Duo. Should you not already have Duo installed, please find instructions here.

    Duo Prompt Mobile

    9. If the login was successful, you will receive one of the following screens depending on your device brand.

    GlobalProtect Android App Login Successful ScreenshotGlobalProtect App iPhone Connected Screenshot

    To Use:

    Tap GlobalProtect icon to open

    GlobalProtect App Icon

    Select Tap To Connect

    GlobalProtect App Tap to Connect Screenshot

    Enter your NetID and password (if prompted)

    Screenshot of NetID Login page

    Authenticate with Duo (if prompted)

    Duo Prompt Mobile

    The app will state the connection is successful and you may begin browsing. While GlobalProtect is enabled, any application you use or site you visit will be securely routed through the VPN service.

GlobalProtect FAQ

  • What is a VPN and why use it?

    A VPN is a Virtual Private Network.  It’s a secure tunnel that allows you to connect to CSU resources and software through the internet when you are not on campus.  This tunnel preserves privacy, prevents unauthorized access, and keeps the work you are doing on that device secure.  At CSU we use GlobalProtect as our VPN service.

    To learn more about VPNs, their uses and protections they offer, you can watch What is a VPN and Why Should You Use One? by VPN Overview.

  • Is there a difference between using the GlobalProtect desktop client or accessing it via a browser?

    Watch the video: GlobalProtect Client/Agent vs. Web Portal: How to Use and Why it’s Better to Use the Client

    The GlobalProtect web portal (browser) is set up to access a set of defined applications configured for application URLs.  It is a static configuration and cannot be modified by the user.  The web portal is recommended for users who only need to access resources such as TimeClock Plus or links from the aar.is.colostate.edu website. 

    The GlobalProtect client/agent is a VPN tunnel configured to access all resources on campus.  When connecting via the client/agent, you will receive a CSU IP address and will be on the CSU network.  You will be able to perform functions such as accessing internal CSU websites, remote terminal or desktop sessions, and other resources not publicly available.  It is important to note that the VPN is configured as a split tunnel, so resources on the public internet are accessed through your ISP, not through CSU’s network. 

    For these reasons, we recommend using the GlobalProtect desktop client/agent unless you are accessing TimeClock Plus or AAR.IS.colostate.edu and links from that site. 

  • How do I use Global protect with a Linux device?

    First, access the OneDrive folder that contains all current Linux installers supported by CSU’s VPN environment. Click “Download”.

    Screenshot of OneDrive folder with Linux installer folder, open and download buttons.

    Once you have downloaded this package, install GlobalProtect by following the instructions on Palo Alto’s website. Note: If you don’t want the GUI version, skip steps 2 and 3 of the GUI instructions, and go to step 2 of the CLI instructions.

    For compatibility questions, users can consult the Palo Alto Compatibility Matrix.

  • What do I enter for the portal address?

    When launching the GlobalProtect app for the first time on a new device, it will prompt you for the portal address. Enter gateway.colostate.edu and click Connect.

    GlobalProtect Client Enter Portal Address Screenshot

  • What troubleshooting steps can I take for general issues?
    1. From the system tray, click GlobalProtect to open it.
    2. In the top right, click the GlobalProtect hamburger icon icon and select Settings > General.
    3. Under Portals, click gateway.colostate.edu to select it, then click Delete.
      GlobalProtect Settings Screenshot
    4. In the upper right, click the X to close the window.
    5. Go back to your system tray and click GlobalProtect to open it.
    6. When prompted for a portal address, enter gateway.colostate.edu, then click Connect.
      GlobalProtect Client Enter Portal Address Screenshot
    7. When prompted, enter your NetID and password, then confirm your identity with Duo two-factor authentication. You will then be connected to GlobalProtect.

    Disable iPv6

    If you are having trouble resolving connection issues, you may need to disable iPv6:

    • Windows:
      • Go to “Settings” > “Network & Internet” > “Status”
      • Select “Change adapter options”
      • Right click on your active network adapter (Ethernet or Wi-Fi) and select “Properties”
      • In the Properties window, scroll down until you see “Internet Protocol Version 6 (TCP/IPv6)”. Uncheck the “Internet Protocol Version 6 (TCP/IPv6)” checkbox to disable IPv6.
      • Click on “OK” to save the changes and then restart your PC.

    Additional Support

    If you have questions about using GlobalProtect, please reach out to your college or department’s IT support. If you are unsure of who your support contact is, contact the Central IT Help Desk at help@colostate.edu or (970) 491-7276. 

  • When does the GlobalProtect session time out?

    The session may timeout after 3 hours if the device goes idle, is locked, or goes to a low-power mode. The maximum session length is 24 hours with continued use.

    Currently, there is no warning letting you know that you will be disconnected or option to extend the session.  A feature request has been submitted to the vendor to add this type of notification. 

  • How often will I have to authenticate?

    You will have to authenticate each time you connect to GlobalProtect through the desktop agent/client.

  • Why does my VPN disconnect when my computer goes to sleep or is in power saving mode?

    When you have a laptop configured to go to sleep after a period of inactivity or hibernate when the lid is closed, many systems will also put their network adapters into a power-saving mode. To address this, you may need to adjust your power and sleep settings. Under Control Panel / Power Options, select Edit Plan Settings, then Advanced Settings. Find and expand the Wireless Adapter Settings, and ensure it is set to Maximum Performance for both On battery and Plugged in.

  • How do I make the GlobalProtect icon always show on my Windows Taskbar?

    The GlobalProtect icon on Windows computers appears in the notifications (bottom right) area of the screen.  Windows computers sometimes hide the icon.  To make it always show, open the Start menu and type  “taskbar icons” to search then choose “Select which icons appear on the taskbar.”

    Windows Search Start Menu - Taskbar Icons

    Next, locate ” GlobalProtect client” and turn it On .

     

    Screenshot Select which icons appear on the taskbar, turn on for GlobalProtect

    The GlobalProtect icon will then appear in the bottom right area of the screen:

    Windows Taskbar showing GlobalProtect icon

  • Does GlobalProtect have a remote file browsing feature in the web portal?

    No, the GlobalProtect web portal is only for resources that can be accessed via an application URL. 

  • Does GlobalProtect offer remote terminal access in the web portal?

    No, the GlobalProtect web portal is only for resources that can be accessed via an application URL.  At this time, use the GlobalProtect client/agent to access remote or terminal sessions. 

  • Can I customize the applications available in the web portal?

    No, the applications are configured at a system level and users cannot add or remove applications or icons.

  • Who can I contact for help?

    If you have questions about using GlobalProtect, please reach out to your college or department’s IT support.

    If you are unsure of who your support contact is, contact the Central IT Help Desk at help@colostate.edu or (970) 491-7276.