GlobalProtect Remote Access VPN -  Windows OS Download, Install, and Set up

Penn State faculty, staff, students, and affiliates who need a VPN to connect to secured Penn State resources.

This article describes how to download, install, and set up the GlobalProtect virtual private network (VPN) on devices that use a Windows operating system (OS).

Note to authors: Formatting for this article is partially defined/set in a <style> element in the HTML of the main section. (This note is automatically hidden when published.)

In this article:

• Supported versions of Windows OS
• Device Requirements
• Download the GlobalProtect installation file
• Install the GlobalProtect application
• Set up your VPN connection
• Do I have a 64-bit version of Windows?
• To Get Help

Supported versions of Windows OS

To find out which versions of Windows are currently supported, see Microsoft Windows in KB0013898, Supported Operating Systems. (For other supported operating systems, see KB0013431.)

Device Requirements

To use the GlobalProtect application:

• Your device must be protected by anti-virus software. (For a partial list of anti-virus applications, including free options, visit Anti-Virus Software.)
• Virus definitions must be up to date (less than 30 days old).
• Real time protection (RTP) must be enabled. (Depending on your anti-virus software, this feature may be called "active monitoring", "auto-protect", "real-time scanning", or something else.)
• You must not be connected to another VPN, such as AnyConnect or Barracuda. (Note: If Barracuda is installed, it must be uninstalled prior to using GlobalProtect.)

Download the GlobalProtect installation file

1. Go to softwarerequest.psu.edu.
2. Under Select a Login Option, click Penn State.
   
3. If prompted, log in via WebAccess and authenticate with MFA.
4. Under Welcome to the Software Request site, click the browse all titles link.
   
5. Scroll to the GlobalProtect tile and click Download.
   
6. If this is your first time downloading GlobalProtect, you will be taken to the Agreements page:
   
   1. Read the information, then check the box next to Export Control to signify that you agree.
      
   2. Click Get Downloads.
      
7. On the File Download GlobalProtect VPN page, scroll down to the Windows(64) heading.
8. Under Windows(64) select the appropriate installer for the CPU used by your computer then click that filename to download the installation file.
   (Note: the ARM based installer is necessary for ARM CPU computers, the other installer is for typical Intel based CPU computers)

(For more information on the installation packages available for each operating system, see KB0013671, GlobalProtect Remote Access VPN - Supported Agent Versions.)

Install the GlobalProtect application

1. If the file does not run automatically after you download it, locate the file and double-click it.
2. If prompted, enter an administrative username and password for the computer.
3. Click Next in each of the next two windows to complete the installation.

Set up your VPN connection

Once the application has been installed, the GlobalProtect icon will appear in the notification area of your taskbar (also called the "system tray"). Follow these steps to set up your VPN connection:

1. Click the triangle to open the system tray, then click the GlobalProtect icon to open GlobalProtect.
   
2. Under Please enter your portal address, enter vpn.psu.edu.
   
   NOTE:  You can only have one VPN open at a time. If you have a VPN connection open in another application -- for example, Cisco AnyConnect -- you must close it before you can open a VPN with GlobalProtect.
3. 
4. 
5. Click Connect.
6. The VPN connection requires authentication through Microsoft multi-factor (MFA) authentication.
   
   • Use your Penn State email address (for example, abc123@psu.edu) and password.
   • Respond to the MFA push that you typically receive.
7. When you are connected to the VPN, a checkmark will appear next to the GlobalProtect logo in the system tray:
   

Do I have a 64-bit version of Windows?

To determine whether you have a 64-bit version of Windows:

1. Open Settings.
2. Navigate to the System settings.
3. Click About.
4. Review your System type, under Device specifications.
   
   • If your system type is 64-bit, click here to return to the main instructions.
   • If your system is 32-bit, contact the Service Desk.
     

Do I have an ARM processor?

To determine if your Windows computer uses an ARM processor, you can check the "System Type" in the "System Information" window or the "About" settings. Specifically, look for "ARM-based processor" to indicate an ARM processor, or "x64-based processor" to indicate an Intel or AMD processor. 
Here's how to check:

1. Method 1: Using System Information:
   Press the Windows key and type "msinfo32" and press Enter to open the System Information window.
   In the System Information window, look for the "Processor" or "CPU" information. If it mentions "ARM", your computer has an ARM processor.
   If it says "x64" or refers to Intel or AMD, it's likely a x86 processor. 
2. Method 2: Using Settings:
   Press the Windows key and type "Settings" and click on it.
   Select "System" then "About".
   Under "Device Specifications", check the "System Type". It will show either "x64-based processor" (for Intel/AMD) or "ARM-based processor" (for ARM64). 
3. Method 3: Using Command Prompt (PowerShell):
   Open the Command Prompt (PowerShell).
   Type echo %PROCESSOR_ARCHITECTURE% and press Enter.
   The output will indicate either "x86" (32-bit), "AMD64" (64-bit), or "ARM64". 

4. Example Output from Command Prompt:
   If the output shows "x86", it's a 32-bit Intel or AMD processor.
   If the output shows "AMD64", it's a 64-bit Intel or AMD processor.
   If the output shows "ARM64", it's an ARM processor.

Windows installation for manual Default browser configuration

If you have trouble with initial connection to the portal after installing normally you may need to enable the Default browser manually.  This is sometimes seen as the browser being stuck on connecting.  Follow the instruction below to enable Default browser before connecting to the GlobalProtect portal.

1. 1. Open a command window from the windows start menu and select "Run as Administrator". This can be found by searching for "cmd" in the "Type here to search" box.
   2. Find the GlobalProtect install file in Windows Explorer window and rename it to "GlobalProtect.msi". This is typically in the Downloads folder.
   3. From the command window use the cd command to change directory to the location where your GlobalProtect.msi file is located (example: cd C:\Users\username\Downloads).
   4. Type or copy and paste the following command without the quotation marks in the command window "msiexec.exe /i GlobalProtect.msi DEFAULTBROWSER=YES"
   5. The GlobalProtect install application should open and you can select repair installation if you already have GlobalProtect installed. You should accept the default options for both new and repair installations.
   6. Enter the portal name when prompted to connect to the VPN.  The portal name is "vpn.psu.edu" without the quotation marks.
   7. It is recommended that Google Chrome or Mozilla Firefox be configured as the default browser on the computer for the best user experience with login to GlobalProtect.
   8. When the Penn State login page is displayed if the username that is prompting for password is not your PSU account perform the following sequence.
      1. Enter an incorrect password  to ensure this login fails
      2. The option is then presented to select another account to use for login
      3. Select or enter the Penn State credential and proceed with normal login

To Get Help

If you have questions or experience any difficulties, use any of the following methods to contact the IT Service Desk for help:

1. • Visit the IT Help Portal
   • Call us at 814-865-HELP (4357)
   • Email us at ITservicedesk@psu.edu

For more information and a list of related Knowledge Base articles, see KB0013431, GlobalProtect Remote Access VPN - Overview.