GlobalProtect VPN: Installing and Connecting Your Carleton VPN

Carleton's VPN, called GlobalProtect, provides encryption and security while using the Internet, and it allows you to access Carleton's online resources from off campus. Please note:

• There are a few common applications (such as the Zulu Softphone) that require the use of the VPN for people who are off campus. Search for systems you use here in the ITS Knowledge Base and note whether they indicate that the VPN is required.
• In addition, anyone accessing sensitive data is required to use the VPN. Here is more information about sensitive data (link opens in a new tab). 

How to Install the GlobalProtect VPN

1. Download the GlobalProtect VPN Installer (opens in a new window)
   1. You can also install this from the App Store for iOS devices or the Google Play Store for Android devices.
   2. You will see a login page from Palo Alto. Please use your Carleton username and password to log in.
2. Run the installer, following its prompts.
   1. On Carleton-owned Windows machines, users will be prompted to enter an administrative username and password. The username is .\admin and the password is the one that you set. If you have forgotten your password, contact the ITS Helpdesk or call 507-222-5999. Have your CCID (the 5-digit number on a Carleton barcode sticker on your computer) when you contact the Helpdesk.
3. If prompted, enter the following Portal Address: gateway.carleton.edu
4. Restart your computer (both Windows and MacOS)

MacOS: System Extension blocked Warning

If you see a warning that a System Extension has been blocked:

1. Click on the Apple menu in your task bar
2. Select System Preferences (macOS 11-12) or System Settings (macOS 13-14)
3. Select Security & Privacy (macOS 11-12) or Privacy & Security (macOS 13-14)
4. In the General Tab (macOS 11-12) or the main window (macOS 13-14), if you see "System software from developer 'Palo Alto Networks'"... (macOS 11-12) or "System software from application 'GlobalProtect'"... (macOS 13-14)
   • On macOS 11-12
     1. click on the lock to make changes
     2. Enter the username and password you use to log into your computer
     3. Click allow next to "System software from developer 'Palo Alto Networks' was blocked from loading"
     4. Click the lock to stop making changes
   • On macOS 13-14
     1. Click allow next to "System software from application 'GlobalProtect' was blocked from loading"
5. If you did not see anything listed under the "Allow apps downloaded from" section of the General Tab (macOS 11-12) or the main window (macOS 13-14), please contact the ITS Helpdesk (507-222-5999).

Linux: Installing the GlobalProtect VPN

1. Download the archive with the installer in it here (link opens in a new tab).
2. Unpack the archive and run the version you need - more detailed instructions are available here (link opens in a new tab).

Connecting and Disconnecting the VPN

1. Click on the GlobalProtect Icon in your task bar (near the computer's clock)
   1. On a Mac, If nothing happens when you click this icon you may have to manually allow security access to Global Protect.  See the instructions in the How to Install section above, step 4 on allowing security access on a Mac.
2. If this is the first time you are running GlobalProtect after installation, it may prompt you for a portal address.
   1. Enter: gateway.carleton.edu
   2. Enter your Carleton username and password when prompted
3. Click Connect
4. When you are finished using the VPN, click Disconnect

If you want to quit the GlobalProtect app, you can do so via Task Manager (Windows), Activity Monitor (macOS), or System Monitor (Linux). Do keep in mind that quitting the GlobalProtect app will mean you will need to reopen it if you want to connect to the VPN again.