UD VPN: Palo Alto VPN User Instructions

 

 

Student & Faculty VPN for COVID-19 Learn from Home Access

UDIT has been working since the onset of the spread of COVID-19 to enhance online services for students, faculty and staff. As of March 23rd, a new VPN solution is available for UDel users. The Palo Alto GlobalProtect is a virtual private network (VPN) solution that enables encrypted access to protected resources.  This solution will allow staff access to campus resources that require use of University IP addresses or UD VPN IP addresses, such as restricted Webforms, systems on private networks, and other applications.  

This solution will not enable access to protected resources and desktops that require static VPN IP addresses or VPN groups when using AnyConnect VPN. Please contact your IT-Pro to determine whether your resources are protected by existing campus network access policies. 

To use the Palo Alto VPN, you will need to download and install the Palo Alto GlobalProtect agent software from the portal as described below. 

 

Before you begin the installation process:

  • The following steps require you to have administrative access on your computer.

  • Only the Windows and Mac agents are are available through the login portal.

  • Apple iOS & Android clients can be downloaded via the Apple App Store & Google Play Store.

 

Palo Alto VPN User Instructions

  1. Navigate to https://sslvpn.nss.udel.edu in your web browser.

  • On the CAS login screen, enter your UDelNet ID (without @udel.edu), password, and your 2FA code. 

UD CAS login window with username and password fields

  1. Once connected, you will be presented with Windows or Mac download options.  Download the appropriate agent for Windows or Mac. If you use Windows and are not sure whether to download the 32 or 64 bit version, see this Microsoft article.

available downloads

Warning: Do NOT use any other download location, such as the Windows Store or the Apple App Store. These versions may not be compatible with the UD VPN configuration.
 

  1. Follow the OS specific instructions below:

    1. Windows

      1. Start the installer. This step requires that your account has administrative permissions on your computer.

  1. Accept all installation defaults.
Windows installation wizard
 
  1. mac OS

    1. Start the installer.

    2. The System Extension Blocked window opens. Click Open Security Preferences.

  1. The Security Preferences window opens.

  2. Click the lock icon in the lower left corner, and type your computer login credentials. This step requires that your account has administrative permissions on your computer.

 
mac security preference window

  1. Click Allow. Then close the system preferences. 

  1. Select Continue to complete the installation.

macOS Install Global Protect Window . Global Protect check box is marked.

 

  1. Linux
UD only supports the GUI Linux installer.

  1. Follow these instructions to install GlobalProtect VPN app for Linux. 

 
  1. Run the GlobalProtect VPN agent by selecting GlobalProtect from the Windows start menu or the macOS applications folder.
Windows macOS
GlobalProtect from Windows start menu contents of mac Applications folder

  1. Enter the portal server name:  sslvpn.nss.udel.edu

If your computer runs the macOS, and the GlobalProtect welcome window does not automatically appear, click the GlobalProtect icon in the system status bar to start it. Then click Connect.

  1. The agent will require you to login through CAS using username (without @udel.edu), password and 2FA token to start the connection.  You will also need to reauthenticate after rebooting or long periods of inactivity.
In macOS, a window appears asking whether GlobalProtect can have access to your Desktop, Documents, Downloads and network volumes folder. You can choose Don't Allow or OK according to your preference.

  1. After you connect through GlobalProtect VPN for the first time on your computer, you can start the GlobalProtect VPN from the taskbar.

 

Tips

  • You can set Global Protect preferences to set your default VPN connection.There are three connection options:

    • Default (UD Only): Split Tunnel Traffic
    • Full Tunnel
    • Best Available: the Global Protect VPN client will choose most available connections.

  • Cisco AnyConnect and GlobalProtect can both be installed on the same system, but they should not be active simultaneously.  There will likely be access issues which will be difficult to detect and resolve.

  • You can uninstall GlobalProtect VPN

    • macOS: re-run the installer program, and choose Uninstall GlobalProtect.

    • Windows OS: from the Windows start menu, locate Add or Remove programs. Find GlobalProtect in the list of programs, and choose Uninstall.

Reminders

  • The Palo Alto VPN is for the general VPN pool users to access campus resources.  It is not for users that require a static VPN IP or are a member of a VPN group. 

  • Disconnect from the Palo Alto VPN when you do not need to access secure UD resources.

Global VPN disconnect window.

 

60% helpful - 5 reviews

Details

Article ID: 709
Created
Mon 3/16/20 11:42 AM
Modified
Tue 3/31/20 9:46 AM