2factor VPN - Connect to VPN with the Palo Alto GlobalProtect Client

This document outlines the process to connect to VPN using the 2factor VPN client, Palo Alto GlobalProtect.


This document is specific to the 2factor VPN service that uses Palo Alto GlobalProtect. 2factor VPN is used to access ERP resources and is not the same as WiscVPN or Departmenal VPN. If you are uncertain if you should use 2factor VPN, please contact the DoIT Help Desk.

Note: If your machine is managed by Departmental Support, your machine should already have the Palo Alto GlobalProtect VPN client.

Connecting to the VPN

    Note: If you connected to another VPN (such as WiscVPN or a Departmental VPN), you will need to disconnect from the other client prior to establishing a connection with the GlobalProtect Client. If you attempt to connect without disconnecting other VPNs, it will either fail to connect, or fail to function properly if you are able to connect.

  1. Unless you have been informed that you are already authorized to connect to the Palo Alto 2factor VPN, you will first need to request and be granted access to it. See 2factor VPN - Request Access to Palo Alto GlobalProtect VPN.
  2. Open the Palo Alto GlobalProtect client; if GlobalProtect is already running and disconnected, right-click the icon GlobalProtect Icon in the bottom-right toolbar (Windows) or the top-right menu bar (Mac) and click Show Panel
  3. On the GlobalProtect Home screen, enter the VPN address in the Portal box. The following 2factor VPN connections are available:
    • cybersecurity.vpn.wisc.edu
    • hrs.vpn.wisc.edu

    GlobalProtect Portal

  4. Enter your NetID in the Username field

    GlobalProtect Username

  5. Enter your NetID password in the Password field, then click Connect

    GlobalProtect Password

    Note: If your password is incorrect, you will be asked to re-enter your NetID and password. If you are not authorized, you will be repeatedly prompted for your username and password and will need to request access (see 2factor VPN - Request Access to Palo Alto GlobalProtect VPN).
  6. A new window will pop up asking for your security code; enter your 6-digit OTP code from your Symantec VIP token and click OK

    GlobalProtect One-time Password

  7. Once connected, you will see a confirmation window that you may close

    GlobalProtect Connected Confirmation

  8. To disconnect from the VPN, right click the icon GlobalProtect Icon in the bottom-right toolbar (Windows) or the top-right menu bar (Mac) and click Disconnect

See Also:

Keywords:HRS ERP vpn.wisc.edu global protect vpn disconnect cybersecurity   Doc ID:67134
Owner:Ben R.Group:UW Digital ID
Created:2016-09-22 04:57 CDTUpdated:2017-02-07 18:35 CDT
Sites:Access Management Services, DoIT Help Desk, DoIT Tech Store, Human Resource System (HRS), UW Digital ID
Feedback:  0   0