GrizzVPN Instructions for Faculty and Staff

VPN Information

Oakland University provides Virtual Private Network (VPN) connectivity to faculty and staff to access on campus computing resources from remote locations. A VPN connection allows the user to remotely establish a secure network connection from their device to the Oakland University Network.

To enhance security the VPN is protected by DUO Multi-Factor-Access (MFA), more information on DUO is available HERE.

Regulations

Export of CU Boulder VPN Client ("Client") is subject to controls and restrictions specified by the United States Department of Commerce under the Export Administration Regulations.

The Client may not be downloaded or otherwise exported to Cuba, Iran, Libya, North Korea, Sudan, and Syria, or to any person who is on the U.S. Commerce Department's Table of Denial Orders or one of the Treasury Department's exclusion lists. By downloading the Client, you are agreeing to the forgoing, and you are representing and warranting that you are not located in, or a national or resident of, any such country or on any such list.

Further, you must agree that you will not knowingly export or transfer, whether directly or indirectly, the Software or any system containing such Software to anyone outside the country of delivery without first obtaining a license or verifying that a license has been obtained from the United States Department of Commerce, and satisfying all requirements of the International Traffic in Arms Regulations and the Export Administration Act, as required.

By downloading and/or using this software, you certify that you are eligible to receive products exported from the United States, without any restriction under either a U.S. Commerce Department Denial Order or under a U.S. Treasury Department exclusion list. You also understand that any country to which you wish to export this software may have varying requirements and that it is your sole responsibility to be sure you understand and comply with foreign laws regarding the import/export and use of this product.

Connecting to the GrizzVPN

1. Go to the GrizzVPN portal to download the Global Protect client at https://grizzvpn.oakland.edu and login with your NetID username, password, and DUO.

2. Download the correct Global Protect client / agent for your operating system. The portal has the following 32 / 64 bit clients available for download: Linux, Windows, and Mac.

1. If you are using Windows and are unsure which version to choose, you can check by selecting the start menu and type "About your PC".
2. Under "Device Specifications", System type will list if the system is 32-bit or 64-bit operating system. Most systems will be 64-bit.

3. After the client downloads, close the grizzvpn.oakland.edu portal page, and install the client. The portal page is only for client downloads, the client will be used to connect to the GrizzVPN.

4. After the client is installed, open the Global Protect client. If you do not see Global Protect open, it will be located in your taskbar with an icon that looks like below.

5. Enter "grizzvpn.oakland.edu" in the Portal field and then click Connect.

5. You will be redirected to your default browser to authenticate. Login with your NetID username, password, and DUO.

1. If you need to edit settings for the VPN, you can select the 3 lines or the hamburger button at the top right

6. After successful authentication, you will be redirected to the following PaloAlto page. Click open GlobalProtect if you see the system dialog.

7. Verify the Global Protect client says Connected. The client can be found in the taskbar’s system tray.

8. When finished working or ready to disconnect from the VPN, open the Global Protect client and click Disconnect.

9. The next time you need to login into the GrizzVPN, open the Global Protect client, click Connect, and login with your NetID username, password, and DUO.

How do I access my work computer?

The VPN connection can be used to connect remotely to your Oakland University Work PC. Instructions on setting up your work PC for remote connectivity can be found here: How do I connect to my work computer

Setting Global Protect to use the Default Browser

Windows

1. Uninstall the Global Protect Client (Uninstall the Global Protect App for Windows)

2. Open a Command Prompt
3. Run the following command in the same directory where you downloaded the Global Protect Client (MSI filename may be different):

   • msiexec.exe /i GlobalProtect64.msi DEFAULTBROWSER=YES

4. Re-install the Client

Mac

1. Open Terminal by either opening Spotlight Search and search for Terminal or Launchpad > Other > Terminal or Finder > Applications > Utilities > Terminal

2. Run the following command:

   • sudo defaults write /Library/Preferences/com.paloaltonetworks.GlobalProtect.settings.plist '{"Palo Alto Networks" ={GlobalProtect={Settings={default-browser=yes;};};};}'

3. Run the following commands:
   • launchctl unload -S Aqua /Library/LaunchAgents/com.paloaltonetworks.gp.pangpa.plist
   • launchctl unload -S Aqua /Library/LaunchAgents/com.paloaltonetworks.gp.pangps.plist
   • launchctl load -S Aqua /Library/LaunchAgents/com.paloaltonetworks.gp.pangpa.plist
   • launchctl load -S Aqua /Library/LaunchAgents/com.paloaltonetworks.gp.pangps.plist
4. Reboot the computer for the configuration changes

Linux

1. Stop the GlobalProtect VPN daemon

   • sudo systemctl stop gpd.service
2. Open pre-deployment configuration file at /opt/paloaltonetworks/globalprotect/pangps.xml

3. Under <Settings>, change default-browser value to yes

4. Reboot the computer in order for the pre-deployment configuration changes to take effect

Troubleshooting / Common Issues / FAQ

• If you see the following SSO back button error, please follow these instructions to fix the issue:

  1. Uninstall the Global Protect Client (Uninstall the Global Protect App for Windows)

  2. Open a Command Prompt
  3. Run the following command in the same directory where you downloaded the Global Protect Client (MSI filename may be different):

     • msiexec.exe /i GlobalProtect64.msi DEFAULTBROWSER=YES

  4. Re-install the Client

• If you are using a Chromebook, install the Global Protect App from the Google Play Store (Install Global Protect App for Chromebook)

If you need assistance, contact the OU Help Desk at [email protected] .