Engineering VPN: PaloAlto GlobalProtect

Please note that there are multiple VPN profiles and GlobalProtect client.  DoIT's instructions in Step 1 will get you started with WiscVPN, but to access the Engineering profiles, you will need to return to this document and add the appropriate CoE profile found in steps 2-6.

1. To begin please download and install PaloAlto GlobalProtect. Use DoIT's Table for installation for your platform:
   
   • Common OS:
     
     • Windows 10/11: GlobalProtect64-6.3.3-c876 (latest) GlobalProtect64-6.2.8-c263 (previous stable)
     • MacOS: GlobalProtect-6.3.3-c876 (latest) GlobalProtect-6.2.8-c263 (previous stable)
     • Linux: PanGPLinux-6.3.3-c31 (latest) PanGPLinux-6.2.9-c4 (previous stable)
   • Less common OS:
     • Windows on ARM64: GlobalProtectARM64-6.3.3.1-876 (latest) GlobalProtectARM64-6.2.8-c263 (previous stable)
     • Windows UWP: PanGPUWP-6.2.4-c1 (latest)
     • 32-Bit Windows (what are you up to?!?): GlobalProtect-6.3.3-c876 (latest) GlobalProtect-6.2.8-c263 (previous stable)
     • There are more too, and archival versions of clients for very old OS, but contact the Help Desk if you have questions.
   • If you need step-by-step instructions, DoIT has provided them in WiscVPN Client Installation Instructions but you will want to use the clients linked above, and the portal addresses in the next step.
2. Once installed, you will be asked for a portal address. Please choose from the following addresses depending on your account type and access needs:

   VPN Portals by account type

   Account Type	Portal Address
   Graduate Students / Staff (Activation form)	engr-full.vpn.wisc.edu   engr-split.vpn.wisc.edu
   Undergraduates (Activation form)	engr-lic.vpn.wisc.edu
   Collaborators (Granted Automatically)	engr-collab.vpn.wisc.edu

   If necessary, more information on account types can be found here. You can find more information on activation on the Activation of VPN access page
3. Once you have chosen your address, enter it into the GlobalProtect Client.
   
4. The client will then prompt you to sign in in a popup window. Enter your CAE username and password.

   If you have not yet activated your Engineering VPN or you are not entering your CAE credentials, you will get an error saying you are an unauthorized user. You can activate your VPN here. If you forgot your CAE credentials, you can recover them here.*

5. Once you are connected, a checkmark will be visible and there will be a button to disconnect:.
   • On Windows, in the future (after the first time using GlobalProtect), you will be able to use the drop down menu to choose which VPN you would like to connect to (Full, Split, License, or Collaborator). Please note that you will only be able to connect to the VPN's which you are allowed (see chart above).
   • For MacOS, in order to switch VPN's you must first disconnect from the VPN you are using, and then switch the portal address (not the gateway). You may find you need to manually enter the different portal addresses before selecting them in the drop-down. You can do so by going to the menu in the upper right hand corner (three bars) and selecting "Settings." See 2nd image below.