Palo Alto GlobalProtect VPN Client Installation (Mac)

Action

To connect to UAlbany's VPN service using a macOS device, follow the steps below.

(These instructions have been updated for macOS 13.x (Ventura).  Specifics of some screenshots may vary between macOS versions)

Instructions

Palo Alto Instructions From Vendor and Compatibility Matrix

Install GlobalProtect on Mac OS X

  1. Open a web browser and go to https://uavpn.albany.edu
  2. Log in with your University at Albany NetID and password.


  3. Authenticate to Duo
  4. Download the appropriate GlobalProtect client for your operating system (Mac 32/64-bit GlobalProtect Agent).


  5. Run the GlobalProtect setup application (GlobalProtect.pkg) and click Continue to begin.
  6. IMPORTANT: Make sure both GlobalProtect and GlobalProtect System extensions options are checked, and click Continue to proceed.
  7. Click Install to proceed with the the installation.


  8. Either use TouchID to authenticate (if your Mac supports it, or enter your system password when and click Install Software when prompted.
  9. IMPORTANT: You should receive the following "System Extension Blocked" message.  Click Open System Settings.

    Alternatively, you may access the appropriate security panel by going to Apple MenuSystem SettingsPrivacy & Security

  10. You should see a message that System software from application "GlobalProtect" was blocked from loading.  Click the Allow button.

    This must be performed within 30 minutes of completing the installation and before running the application to connect.

    If you do NOT have this setting, continue with the rest of the steps.  If GlobalProtect does not successfully connect, please reach out to the ITS Service Desk for assistance.


    More information about this security feature: https://developer.apple.com/library/archive/technotes/tn2459/_index.html

  11. A GlobalProtect window should appear in the upper-right menu bar.  If not, click the icon that appears to resemble a Globe.

    If you are using a UAlbany ITS-managed device, the portal information may already be configured and all you have to do is click Connect.  Otherwise, enter the portal address uavpn.albany.edu and click Connect.

  12. Sign in with your University at Albany NetID and password.


  13. Authenticate to Duo as appropriate
  14. Click "Save this device" to minimize future Duo prompts.
  15. You may see a prompt asking if GlobalProtect can filter network content.  Click Allow.
  16. You should now see a notification in the upper-right hand corner of your screen, and/or when clicking on the GlobalProtect globe icon, that you are securely connected to the "corporate network".

Disconnect from the VPN

  1. Select the GlobalProtect icon in the notification area at the upper right to bring up the VPN connection window.
  2. Click Disconnect to end the VPN session.

Connect to the VPN

  1. To open the GlobalProtect VPN client:
    1. option 1: In Applications, double-click GlobalProtect
    2. option 2: Press cmd+space and type "Global Protect" and press Enter
  2. When prompted, enter your NetID and password, and click Connect.
  3. The GlobalProtect icon will be minimized in the menu bar in the upper right.

If you are connected to another VPN (Norton, Nord, etc..), please make sure you disconnect before connecting with our GlobalProtect VPN

Related articles

File Storage - Mapping Network Drives



Need more help? Contact the ITS Service Desk.