Overview
The GlobalProtect VPN (Virtual Private Network) client by Palo Alto Networks is a tool that allows you to securely access the university's network and resources from anywhere, whether you're working from home, traveling, or off-campus. Think of it as a secure bridge between your device and the university's systems, ensuring that your connection is private and protected from online threats.
How Does GlobalProtect Work?
GlobalProtect creates a secure, encrypted connection between your device and the university’s network. This means that even if you’re using public Wi-Fi (like at a coffee shop or airport), your connection will be private and safe. Once you’re connected, you’ll have access to the same university resources you’d normally use on campus, such as shared department drives and internal websites.
How GlobalProtect (VPN) Handles Network Traffic
GlobalProtect only handles Internet traffic to and from Grand Valley intranet and network resources. When you visit other websites, like your personal banking site, that traffic does not go through the VPN. Also, GVSU does not unlock and check the encrypted data on these other websites.
To learn more about GlobalProtect, please review the documentation from Palo Alto Networks here: https://docs.paloaltonetworks.com/globalprotect.
Replacing Older VPN Solutions
The university is upgrading its remote access tools to provide a more secure, reliable, and user-friendly experience. As part of this upgrade, GlobalProtect will replace three older systems:
-
Secure Access Client by Ivanti
-
DirectAccess
Why Are We Switching to GlobalProtect?
Better Security
GlobalProtect uses the latest technology to protect your connection and keep university data safe. It encrypts all data sent between your device and the university’s network, making it much harder for hackers to intercept your information.
Simpler Experience
Unlike the older tools, GlobalProtect is designed to be easy for everyone to use. You’ll only need one app to securely access university resources, no matter where you are or what device you’re using.
Works Everywhere
GlobalProtect is compatible with Windows, macOS, iOS, Android, and Linux. This means you can use it on your laptop, smartphone, or tablet without any hassle.
Faster and More Reliable
GlobalProtect provides a more stable connection so you can work without interruptions. It’s also faster than the older systems, making it easier to access files and applications.
How Does GlobalProtect Compare to the Old Tools?
| Feature |
Ivanti Secure Access |
DirectAccess |
GlobalProtect |
| Security |
Good |
Good |
Excellent |
| Ease of Use |
Moderate |
Complex |
Very Easy |
| Device Compatibility |
Limited |
Windows Only |
All Devices |
| Automatic Connection |
No |
Yes |
Yes |
| Multi-Factor Authentication (MFA) |
No |
No |
Yes |
How to Connect to a Gateway
Note: This guide is intended for GVSU-owned devices. For personal devices, please follow the steps in this knowledge document to install GlobalProtect: BYOD (Bring Your Own Device): Installing the GlobalProtect VPN Client
Connecting to a Gateway
When your computer connects to any network, GlobalProtect will check your location by attempting to resolve a DNS address. If it detects that you are on campus, you will receive a message in the client stating, "You are on the internal corporate network" and you will not connect to a gateway. If GlobalProtect detects that you are off campus, you will be automatically connected to a gateway. While on campus, you typically do not need to connect to a gateway, as most Grand Valley resources will be accessible directly through the network. However, if you need to access more restricted services that require VPN access, please follow the steps below to connect to a gateway.
1. Click the Show hidden icons button in the system tray.
2. Click on the GlobalProtect icon.
3. Click the Change Gateway button.
4. Click on US Central in the list of available gateways.
You should now be connected to the US Central gateway. To verify you are connected to any gateway, make sure the "You are on the internal corporate network" message has been replaced by a gateway name, like in the image below.
GlobalProtect Implementation Timeline
Ivanti VPN has been officially retired. All GVSU-managed Windows 10, Windows 11, and Mac devices are now using GlobalProtect. Bring your own devices (BYOD), for both students and faculty, are now also using GlobalProtect.