Public Knowledge - VPN General Access Installation Instructions

VPN General Access Installation Instructions KB0030725

These instructions allow remote access to university assigned computers using Palo Alto GlobalProtect. BYU VPN is used for accessing an internal network for when you're off-campus. Most students do not need General Campus VPN in order to access basic student resources such as: Learning Suite, BYU Library, myBYU, etc.

Installation instructions vary depending on device, please see the instruction specific to your device below.

Table of Contents

Installation Instructions for Mac OS X/Windows

  1. On the GlobalProtect page, select the Client that applies to your specific device (Mac, Windows).

  2. Save the Client to your computer and open the file once it's finished downloading.

  3. Follow the on-screen installation instructions.

  4. Locate and open the application that you installed.

  5. Enter your portal address (vpn.byu.edu) as prompted by GlobalProtect. Authentication may be required using your Net ID and Password. 

  6. You should now be securely connected to the corporate network. Open GlobalProtect again to verify the connection.

Note: There have been issues where the Install button doesn't install properly. If this occurs, please use the link lower down on the App Store dialog instead labeled: "Continue installing from outside the Store." The GlobalProtect app icon will show up in the Windows 10 Task Bar and the connection should work properly.

 

Mac OS X Troubleshooting

  • If you attempt to connect but the connection just keeps spinning and never connecting, follow the steps in this article to resolve that issue.

  • If you are struggling to download and install the client, it could be you have an incompatible version of your OS. Please check in this article here for compatibility with the application.

 

Another step to try: uninstall the GlobalProtect client, then restart the Mac in Safe Mode and re-install GlobalProtect.

To do this:

  1. Select the Apple menu and click Shut Down

  2. After Mac shuts down, wait about 10 seconds then press Power Button.

  3. Immediately after Mac starts (some Mac computers play a startup sound), press and hold the Shift key

  4. Release the Shift key when you see the gray Apple logo and progress indicator.

  5. Proceed to re-install GlobalProtect.

  6. Test VPN access. If successful, reboot in normal mode & retest.

 

Windows Troubleshooting

Most issues have been resolved through a clean uninstall and reinstall of the program. 

 

Return to Top

Installation Instructions for Android or Chromebook

  1. Download and install the GlobalProtect client from the Google Play Store.

  2. Open the Application.

  3. Setup a new connection.

  4. After the installation is complete, choose to connect to "vpn.byu.edu" (no quotes).

  5. This will then bring you back to the main screen.

  6. Click on a Connection to connect.

  7. Enter your BYU Net ID and password.

    • IMPORTANT: The first time you connect you will get a Security Warning, click "Details" and then click import and continue.

 

Return to Top

Installation Instructions for iPhone/iPad Client

  1. Go to the app store and download the GlobalProtect app

  2. Launch the application 

  3. Type in your portal address (vpn.byu.edu) and click "Connect." 

  4. GlobalProtect will ask if you would like to add VPN configurations. Click "Allow."

  5. Type in your passcode.

  6. Sign in with your BYU Net ID and password.

 

Return to Top

Installation Instructions for Linux users

Note: Please read the full list as there are a couple of options and then pick the one that is right for you.

Connecting to SAML SSO VPNs on Linux:

  1. Go to the software.byu.edu to download the Linux client.

  2. Download the Palo Alto provided file:

  3. Untar the file.

  4. apt-get install libqt5webkit5

  5. dpkg -i GlobalProtect_UI_deb-5.1.7.0-10.deb

To launch the UI, you can then type “globalprotect launch-ui” from the command line.

 

There have been some issues reported with the above method and they all center around the SAML SSO technology that is, at present, not as flushed out for Linux clients.  To bypass these SAML SSO issues there is another VPN termination point dedicated to Linux clients, linux-vpn.byu.edu.  To use this, here are two methods that have been tested and which have no reported issues as of yet:

The VPN termination point using RADIUS instead of SAML SSO is linux-vpn.byu.edu (This will send a DUO push notification as well).
Instructions for the Palo Alto Networks Provided Client: 
Install GlobalProtect (Linux Packages are available via software.byu.edu): sudo dpkg -i GlobalProtect_deb-5.2.6.0-18.deb
Connect to GlobalProtect Portal: globalprotect connect --portal linux-vpn.byu.edu
Verify Status:
globalprotect show --status
globalprotect show --details
Disconnect: globalprotect disconnect

 

** OpenConnect (Linux VPN client):
Install OpenConnect: sudo apt-get install openconnect
Connect to GlobalProtect Portal: sudo openconnect --protocol=gp linux-vpn.byu.edu -u <NetID>@byu.edu


Additional feedback/notes:

"Using OpenConnect works, and... [the OpenConnect] client needs to use the "--csd-wrapper" argument.
If you use the "-b" argument, it'll run as a background process, so the terminal isn't required to stay open.
$ openconnect -b --csd-wrapper=/usr/libexec/openconnect/hipreport.sh --protocol=gp linux-vpn.byu.edu


**************
OpenSSL Update Troubleshooting/work-around:

Fernando Ruiz (fru1z) wrote on 2022-05-02 (last edit on 2022-05-02): #32
I use this version: PanGPLinux-5.3.2-c3

To make it work for me in this version, I modified the configuration file: /usr/lib/ssl/openssl.cnf

and comment the following section:

---------------------------------------------

# [openssl_init]
# providers = provider_sect

---------------------------------------------

and added this new section just below the section I commented on earlier:

---------------------------------------------

[openssl_init]
ssl_conf = ssl_sect

[ssl_sect]
system_default = system_default_sect

[system_default_sect]
Options = UnsafeLegacyRenegotiation

---------------------------------------------

Reboot globalprotect and ready!

It is very similar to the solution of @kelly-schoenhofen, Thanks you!!

***********************************************************************************************

Source:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1960268

 

Return to Top