1. Download the GlobalProtect Agent for your specific operating system from the Palo Alto Networks Customer Support Portal: https://support.paloaltonetworks.com/
2. Install the agent and launch it. The Welcome screen appears and displays the default gateway for your location. If you have multiple gateways available, select one from the drop-down menu or click SITE to view all available gateways and choose your preferred gateway.
3. In the Username field, enter your [email protected] account followed by password in the Password field then click CONNECT . For example: [email protected]/MyPassw0rd!
4a) Faculty & Visitors - You will be prompted with a Duo Security Authentication popup window asking how you would like to authenticate yourself (see image below).
i) If this is your first time using Duo Security two-factor authentication with GlobalProtect at ANU, you need to activate your device following instructions here: https://servicesguide3loojdzlzc2qo3h5kobgxwz5m5yopjl6xhpciudmeovptidn4ydmuqd4fynq%40mail cl Ugo= . Please Note: if prompted, use your AD password NOT your O365 one when logging into Net ID Self Service page; OR
ii) If you already have an activated device, please select it from ‘What type of device do you want?’ drop down list then click SEND ME A PUSH or CALL ME to receive a login code; Enter that code into ‘Enter passcode’ text box then click LOG IN;
iii) Alternatively, if neither of Push nor Call options is possible or preferable, choose ENTER A PASS CODE option then generate a new temporary code by clicking either Get Passcodes… button (this may require Adobe Flash Player so please install it beforehand if needed), OR by opening Duo Mobile App on your phone – tap key icon next to ANU item then swipe right across ANU entry in My Devices screen to reveal 6-digit codes; back in browser window insert one of those codes into ‘Enter passcode’ text box just generated within last 30 seconds and click LOG IN button;

4b) Students - You won’t be prompted with any extra security as Two Factor Authentication set up is not compulsory for students **at this stage** though we strongly encourage everyone who can set it up to do so for their own accounts’ protection sake!
1. Open the GlobalProtect app and click the gear icon in the top-right corner.
2. Click Preferences.
3. On the General tab, uncheck the box next to Launch GlobalProtect at startup.
4. Close the app and restart your computer for the changes to take effect.
Worth knowing
When using Palo Alto GlobalProtect, each client device first connects to the internet and then downloads the GlobalProtect app. The app authenticates the user against a directory service like LDAP/AD, RADIUS, or SAML. Once authenticated, the user’s device establishes an encrypted tunnel with a GlobalProtect gateway on the company firewall.
The gateway forwards traffic to the appropriate internal resources based on security policy settings. For example, if there is a rule that allows all traffic from internet-basedIP addresses to reach server A but only port 8080 traffic can reach server B, then those are the only types of traffic that would be allowed through the encrypted tunnel from each remote user’s device.
Palo Alto Networks firewalls can be configured as either globalprotect gateways or satellites. When operating in Gateway mode, PA-500 Series and PA-2000 Series firewalls support up 500 users while PAN-OS 6.* running on PA-3000 Series supports up 2,000 users simultaneously.
Satellite Mode: When you place one or more Palo Alto Networks next generation firewalls in Satellite mode and configure them with identical settings (except for IP address), they dynamically share Tunnel Status information so any new firewall added functions without needing reconfiguration of your security policies
Worth knowing
First, it’s important to remember thatGlobalProtect uses a Virtual Private Network (VPN) to create a secure connection between your device and your company network. This means that all of the data passing through this connection is encrypted, so it’s impossible for anyone to eavesdrop on your traffic. However, encryption can also cause problems with some websites and services that rely on unencrypted traffic – such as online banking or shopping. If you need to access these types of sites while abroad, you may need to disable GlobalProtect temporarily.
Another thing to keep in mind is that different countries have different laws regarding VPN usage. In some cases, VPNs may be completely banned (such as in China), while in others they may be heavily restricted (such as in Russia). Make sure you check the local laws before connecting to a VPN in another country. Traveling with a laptop or other device that has GlobalProtect installed? Don’t forget to set up a passcode or lock pattern – this will help protect your device if it’s lost or stolen while you’re away from home.
Worth knowing
1. Open the Cisco AnyConnect client and enter “https://vpnaccess.osu.edu” in the box labeled “Please enter your desired VPN server address.”
2. Click “Connect.”
3. Enter your OSU username and password when prompted and click “OK.”
4. When presented with a list of group options, choose “_OSUMC-01 - Staff & Affiliates (256-bit)_.” If this is your first time connecting, you may be prompted to accept a certificate; click “Accept” if so.
5. You should now be connected!
Thank your for reading!