Quick Guide: GlobalProtect VPN (Secure Remote Access) Setup

The GlobalProtect VPN application allows access to protected campus resources (like Mentor) from off campus locations or from the Guest wireless network. It may also be required to access other specialized, restricted network services or software. This guide will go through the steps to install, configure, and connect to GlobalProtect VPN (as well as set up Duo Two Factor Authentication if you have not already done that).

Audience

This article is intended for: faculty, staff, students, and college affiliates.

Platform

Microsoft Windows, Apple MacOS

If you are looking for instructions how how to use GlobalProtect on a Chromebook.

• GlobalProtect VPN (Secure Remote Access) Setup for Chromebooks

Contents

1. Install the GlobalProtect VPN
2. Configure VPN
3. Full tunnel VPN configuration
4. Set up Duo Two Factor Authentication
5. Uninstall the GlobalProtect VPN 

Install GlobalProtect VPN

1. Connect to https://vpn.ithaca.edu on the computer you would like to install the VPN application.
2. Log in to the portal with your full Ithaca College email and password.
3. Click the link to download the appropriate GlobalProtect application for the Windows or Mac computer. Most machines are either 64-bit Windows or 32/64-bit Mac computers.
4. Run the downloaded installer.
   1. Leave the default options selected as you proceed through the installation.
   2. You may delete the install package once complete, if prompted.

Configure GlobalProtect

1. Open the GlobalProtect client from the notification area. (It is a small white globe when not connected)

2. Fill in the Portal Address: vpn.ithaca.edu

• This is our full-tunnel vpn, so when you're connected all your traffic to any destination will be encrypted, flow through our VPN gateway, and be logged.
• This is good for most purposes, but see the instructions below for our split-tunnel VPN alternative.

3. Click Connect, and a new window should pop up where you can enter your full Ithaca email and password.
4. Authenticate with DUO using your preferred method. Duo now offers the ability to connect using the "Call Me" option as well as the "Send me a Push", and you can allow DUO to remember you for 90 days.

5. Once connected, the GlobalProtect VPN icon will change to a globe with a check mark.

Alternative: Configuring the Split-Tunnel VPN

While the regular VPN tunnel should meet most needs, there may be times where you would prefer that non-IC related network traffic not be routed through the IC network.

On VPN versions earlier than 4.1:

1.) Change the portal from vpn.ithaca.edu to vpnsplit.ithaca.edu and connect.

On VPN client versions 4.1 and later:

1.) Click on the GlobalProtect icon in your system tray
2.) Click on the gear in the top right, and select Settings
3.) Under Portals, Click Add, and type: vpnsplit.ithaca.edu
4.) This should now be selectable as a portal choice on the drop down on the main connection screen

Duo Setup

Duo is a Two Factor Authentication Service which we use to provide additional security to some applications (such as the VPN). Additional information about Duo is available at www.ithaca.edu/duo.

Uninstall GlobalProtect VPN

1. Connect to https://vpn.ithaca.edu on the computer you would like to install the VPN application.
2. Log in to the portal with your Netpass username and password.
3. Click the link to download the appropriate GlobalProtect application for the Windows or Mac computer. Most machines are either 64-bit Windows or 32/64-bit Mac computers.
4. Choose "Remove GlobalProtect"
5. Click Finish 

Allow your computer to make changes.