Palo Alto GlobalProtect VPN Instructions (Mac)

How to install and use GlobalProtect VPN, from Palto Alto Networks, on a Mac.

GlobalProtect is the preferred vpn (virtual private network) client for WCER and the School of Education as of 2018. All Macs issued since June of 2018 have the GlobalProtect client pre-installed instead of the Cisco AnyConnect Secure Mobility Client. 
IMPORTANT: Cisco AnyConnect is no longer able to establish VPN connections to WCER resources. 

If your Mac does not have GlobalProtect installed, it can be self-installed on any WCER-owned Mac using Managed Software Center.  (If you have a non-WCER or personally owned Mac, see instructions further below.)


Install GlobalProtect on WCER-owned Macs

1) Open Managed Software Center either from the dock or within the Applications folder.

Open Managed Software Center from the dock


2) Within Managed Software Center, browse the Software section (or search) for GlobalProtect. Once found, click the "Install" button for GlobalProtect.
     If you would like to see more details about GlobalProtect first, click on GlobalProtect's icon instead.  Please note that installing GlobalProtect requires an automated logout and restart of your Mac.

GlobalProtect in Managed Software Center

4) After the system restart and user log in, the GlobalProtect Sign In window should appear.
    Enter your WCER/SoE domain username and password and click the "Sign In" button to establish the vpn connection. 

First sign in after installing with MSC


Install GlobalProtect on Non-WCER or personally-owned Macs

1) Connect to and enter your WCER/SoE domain credentials when prompted.

Palo Alto Web Portal


2) When the GlobalProtect Login window first appears, be sure the value of the Portal field is set to, and press the "Connect" button. 

Enter the SoE potal information

3) Enter your WCER/SoE domain username and password and click "Sign In" to establish the vpn connection.

Sign In to GlobalProtect



System Extension Blocked or "Still Working..." message displayed during connection

Users may be prompted to "allow" the loading of a system extension before GlobalProtect will function (usually occurring after the first restart). This is a new, but normal security feature which was added to macOS High Sierra.

The KnowledgeBase link below will instruct you in how to handle this warning:

System Extension Blocked (Mac)



How to use GlobalProtect

Once installed, the GlobalProtect agent is always running from the moment a user logs in, but does not establish a VPN connection until the user initiates the connection.

(Notice the globe icon in the menu bar.)

Connection not established icon

Establishing a VPN connection with GlobalProtect

1) Click on the GlobalProtect menu bar icon at the top right of the screen, and press the "Connect" button.

Connect from menubar icon

2) Enter your WCER network credentials in the username and password fields within the GlobalProtect Login window, and click the Connect button.

Sign In

3) Once a connection is established, the GlobalProtect icon will change to reflect this status.

(Again, notice the globe icon in the menu bar, which now has a shield along with a dark color tone).

Connection established icon

4) To disconnect from the VPN, select the Disconnect option from the GlobalProtect menu bar dropdown.



Keywords:GlobalProtect, Global, Protect, Palo Alto, VPN, Mac, OS X, macOS, Cisco, AnyConnect, WCER, Remote   Doc ID:82702
Owner:David P.Group:WCER Technical Services
Created:2018-06-06 22:50 CSTUpdated:2022-11-28 08:51 CST
Sites:WCER Technical Services
Feedback:  0   0