Cal Poly’s Virtual Private Network (VPN) service allows faculty, staff, and students to access campus technology resources securely.

Items to consider before installing the Global Protect VPN client on your computer:

  • You must be enrolled in /wiki/spaces/CPKB/pages/1851850753 before setting up VPN.

  • You may need administrative access or “elevated rights” to install VPN software on your device.

  • The GlobalProtect VPN app uses your default browser for you to input your login information and to display messages related to connectivity. (Learn more about changing your default browser on Mac, or Windows)

  • Department email accounts will not connect to the VPN. Connect using your personal Cal Poly account.

  • If prompted to update to the newest version of GlobalProtect VPN client, please do so.

If you’re using a Cal Poly state-owned computer or a tech rental, the GlobalProtect VPN is typically preinstalled. If GlobalProtect VPN is not pre-installed please see the support page for installing software on Windows or Mac.

Install VPN Client - (On Mac, Windows, iOS, Android, & Linux)

Mac

  1. IMPORTANT: BEFORE setting up VPN, you must enroll your device(s) with Multi-Factor Authentication (Duo). You will need to add a primary and secondary device.

  2. Go to cpvpn.calpoly.edu and log in with your Cal Poly username (do not include @calpoly.edu) and password. 

    Cal Poly login pop-up
  3. You will be prompted to authenticate with Duo

  4. Click on the Download Mac 32/64 bit GlobalProtect agent link.

    Paloalto networks global protect download page. 'Download Mac 32-64 bit Global Protect agent' is highlighted
  5. Once downloaded, double-click the file to launch the GlobalProtect.pkg installer.

  6. Start the installation by clicking Continue.

    Install ProbalProtect pop-up. Continue highlighted

  7. Select your computer disk (generally labeled Macintosh HD), then click Continue.

    Continue highlighted

  8. Select BOTH GlobalProtect and GlobalProtect System extensions, then click Continue.

    Checked boxed for GlobalProtect and System Extensions

  9. Next, click Install.

    Install GlobalProtect pop-up. Install button is highlighted

  10. Here you should receive a prompt asking you to enter your password to allow this installation. Enter the password you use for your Mac, then click Install Software.

    Installer pop-up. Install Software button is highlighted

  11. You should get a message indicating that The installation was successful. Then click Close.

    Install GlobalProtect pop-up. 'The Installation was successful' message. Close button is highlighted

  12. From the top screen menu bar, Click the GlobalProtect icon, then click Get Started

    Global Protect icon is highilghted and clicked. Welcome message. 'Get Started' is highlighted

  13. Enter cpvpn.calpoly.edu as the portal address, then click ConnectA Cal Poly portal sign-in window will appear on your browser.

    GlobalProtect pop-up. 'Not Connected'. Connect button is highlighted

    You may need to go to System PreferencesSecurity & PrivacyGeneral. Next, click the lock icon, enter your password, then click the Unlock button. Lastly, click Allow.

  14. Log in with your Cal Poly username (do not include @calpoly.edu) and password (similar to step 2) and authenticate using Multi-Factor Authentication/Duo (similar to step 3).
    If GlobalProtect App security warnings pop up on-screen, always click Allow.

  15. You should see a Paloalto Networks logo and dialog message on your browser, and a popup box saying Open GlobalProtect App? 
    Check the box, then click Open GlobalProtect.app.

    'Open GlobalProtect.app' pop-up. 'Always allow' is checked. 'Open GlobalProtect.app' is highlighted

  16. You are now connected to Cal Poly's VPN.

  17. Once you are done with your session, click the GlobalProtect icon, then click the  menu icon, then select Disconnect.

    GlobalProtect icon is highlighted and clicked. Menu, Disconnect is highlighted


Windows

  1. IMPORTANT: BEFORE setting up VPN, you must enroll your device(s) with Multi-Factor Authentication (Duo).You will need to add a primary and secondary device.

  2. Go to cpvpn.calpoly.edu and log in with your Cal Poly username (do not include @calpoly.edu) and password. 

    Cal Poly login pop-up

  3. You will be prompted to authenticate with Duo.

  4. Click the Download Windows 64 bit or Windows 32 bit GlobalProtect agent link, depending on your operating system version.

    paloalto networks GlobalProtect download page. 'Download Windows 32 bit GlobalProtect agent' is highlighted

  5. Run the downloaded file. Then, after the GlobalProtect Setup Wizard opens, install it by clicking Next
    If asked "Do you want to allow this app to make changes to your device?" click Yes

  6. If you do not see the GlobalProtect window, go to the system tray located in the bottom right section of the Windows taskbar, and click on the globe icon.

    globe icon

  7. Click Get Started.

    Get Started button highlighted

  8. Enter cpvpn.calpoly.edu as the portal address, then click ConnectA Cal Poly portal sign-in window will appear on your browser.

    cpvpn.calpoly.edu typed in the field and Connect button highlighted

  9. Log in with your Cal Poly username (do not include @calpoly.edu) and password (similar to step 2) and authenticate using Multi-Factor Authentication/Duo (similar to step 3).

  10. You should see a Paloalto Networks logo and dialog message on your browser, and a popup box saying This site is trying to open GlobalProtect
    Check the box, then click Open. You may need to click on the click here link in the browser window to launch GlobalProtect.

    Paloalto dialog box. Checked box, Open highlighted and click here highlighted.

  11. You are now connected to Cal Poly's VPN. The Connected status is displayed in the system tray located in the bottom right section of the Windows taskbar. 

    GlobalProtect icon is highlighted

  12. Once you are done with your session, click the GlobalProtect icon, then click the  menu icon, then select Disconnect.

    GlobalProtect pop-up. Menu icon is highlighted. in Menu dropdown, Disconnect is highlighted

iOS

  1. Before setting up VPN, you must enroll your device(s) with Multi-Factor Authentication (Duo). You will need to add a primary and secondary device.

  2. Go to the Apple App Store, and search for Global Protect. Download and launch the free app.

    AppStore GlobalProtect Download

  3. Open the GlobalProctect app. Choose to Allow for the dialog box asking “GlobalProtect” Would Like to Send You Notifications.

  4. In the Address field type cpvpn.calpoly.edu as the portal address, then tap the Connect button.

    iOS GlobalProtect app. 'What is your portal address'. cpvpn.calpoly.edu is entered. Connect button is highlighted

  5. Tap the Allow button to allow GlobalProtect to add VPN configurations.

    'GLobalProtect' would like to Add VPN configurations. Allow button is highlighted

  6. Use Touch ID or enter your passcode to add the VPN configuration.

  7. Log in with your Cal Poly username (do not include @calpoly.edu) and password.

    GLobalProtect Login pop-up. Login button is highlighted
  8. You will be prompted to authenticate with DuoPlease be aware of Cal Poly's Responsible Use Policy.

  9. You are now connected to Cal Poly's VPN.

    GLobalProtect. Connected message

  10. Once you are done with your session, go to the GlobalProtecft app screen and tap the circle and shield icon button to disconnect.

Android

  1. Before setting up VPN, you must enroll your device(s) with Multi-Factor Authentication (Duo). You will need to add a primary and secondary device.

  2. Go to the Google Play Store, and search for Global Protect. Tap the Install button to download and launch the free app.

    Android Google Play Store GlobalProtect install button

  3. Enter cpvpn.calpoly.edu as the portal address, then click the Connect button. GlobalProtect will begin retrieving your VPN configuration.

    Android GlobalProtect Login Portal Address Connect

  4. Log in with your Cal Poly username (do not include @calpoly.edu) and password.

    GlobalProtect Login. Login button is highlighted

  5. You will be prompted to authenticate using Duo.

  6. Tap OK to confirm your VPN connection request.

    Connection request pop-up. Ok button is highlighted

  7. Please be aware of Cal Poly's Responsible Use Policy.

    Cal Poly's Responsible use policy
  8. You are now connected to Cal Poly's VPN.

    Android GlobalProtect Connection tab. Auto Discovery is checked. Disconnect button is highlighted

  9. Once you are done with your session, tap the Disconnect button to disconnect.

Linux

  1. Before setting up VPN, you must enroll your device(s) with Multi-Factor Authentication (Duo). You will need to add a primary and secondary device.

  2. Download and install the openconnect package for the operating system using one of the following methods.

    1. Using openconnect, download and install the binary package for the operating system.

      1. Use a package manager.
        Sample Commands

        OS/Distribution Family Command
        Debian/Ubuntu

        apt install openconnect

        Fedoradnf install openconnect
        Red Hat/CentOSyum install openconnect
        SUSEzypper install openconnect
        Arch Linuxpacman -S openconnect
        OpenBSDpkg add openconnect
        FreeBSD

        pkg install openconnect

      2. Run openconnect --version

      3. If the version of openconnect < 8:00 and the gp option is not listed under Supported protocols, uninstall openconnect using the package manager, and build from source

    2. To build from source, confirm the GNU development toolchain is installed and that you have (at least) the following tools installed: gcc, make, automake, tar.

      1. Download the latest source file from: https://www.infradead.org/openconnect/download.html

      2. Extract the source tarball with tar. X.YZ is the version number.

        xzf openconnect-X.YZ.gz

      3. Run the following commands:

        cd openconnect-X.YZ
        ./configure
        make

        This step may require administrator/root privileges.

        make install

  3. Connect to the VPN. This step may require administrator/root privileges. Use your Cal Poly username (do not include @calpoly.edu).

    openconnect --protocol=gp cpvpn.calpoly.edu --user=<YOUR CAL POLY USERNAME>
  4. When prompted, enter your Cal Poly password.

  5. You are now connected to Cal Poly's VPN.

To install a Graphical User Interface (GUI) for openconnect, see:

Uninstall the VPN Client

If you need to uninstall the VPN client from your computer, please visit the Paloalto GlobalProtect support site for uninstall instructions.

Version 6.0x

Version 5.2x


Related Articles

Review Date

Summary

 

Do students still need to download this VPN client if they've upgraded to Big Sur due to Sophos issue? Remove info box?