GrizzVPN Instructions for Faculty and Staff


VPN Information

Oakland University provides Virtual Private Network (VPN) connectivity to faculty and staff to access on campus computing resources from remote locations. A VPN connection allows the user to remotely establish a secure network connection from their device to the Oakland University Network.

To enhance security the VPN is protected by DUO Multi-Factor-Access (MFA), more information on DUO is available HERE.


Connecting to the GrizzVPN

1. Go to the GrizzVPN portal to download the Global Protect client at https://grizzvpn.oakland.edu and login with your NetID username, password, and DUO.

2. Download the correct Global Protect client / agent for your operating system. The portal has the following 32 / 64 bit clients available for download: Linux, Windows, and Mac.

3. After the client downloads, close the grizzvpn.oakland.edu portal page, and install the client. The portal page is only for client downloads, the client will be used to connect to the GrizzVPN.

4. After the client is installed, open the global protect client and enter grizzvpn.oakland.edu in the Portal field then click Connect.

Global Protect Client.png


5. You will be redirected to your default browser to authenticate. Login with your NetID username, password, and DUO.


GrizzVPN SSO Login.PNG


6. After successful authentication, you will be redirected to the following PaloAlto page. Click open GlobalProtect if you see the system dialog.


Palo Landing Page.png


7. Verify the Global Protect client says Connected. The client can be found in the taskbar’s system tray.


Global Protect Client Taskbar.png

Global Protect Client Connect.png

8. When finished working or ready to disconnect from the VPN, open the Global Protect client and click Disconnect.

9. The next time you need to login into the GrizzVPN, open the Global Protect client, click Connect, and login with your NetID username, password, and DUO.


How do I access my work computer?

The VPN connection can be used to connect remotely to your Oakland University Work PC. Instructions on setting up your work PC for remote connectivity can be found here: How do I connect to my work computer


Setting Global Protect to use the Default Browser

Windows

  1. Uninstall the Global Protect Client (Uninstall the Global Protect App for Windows)

  2. Open a Command Prompt
  3. Run the following command in the same directory where you downloaded the Global Protect Client (MSI filename may be different):
    • msiexec.exe /i GlobalProtect64.msi DEFAULTBROWSER=YES

  4. Re-install the Client

Mac

  1. Open Terminal by either opening Spotlight Search and search for Terminal or Launchpad > Other > Terminal or Finder > Applications > Utilities > Terminal

  2. Run the following command:
    • sudo defaults write /Library/Preferences/com.paloaltonetworks.GlobalProtect.settings.plist '{"Palo Alto Networks" ={GlobalProtect={Settings={default-browser=yes;};};};}'

  3. Run the following commands:
    • launchctl unload -S Aqua /Library/LaunchAgents/com.paloaltonetworks.gp.pangpa.plist
    • launchctl unload -S Aqua /Library/LaunchAgents/com.paloaltonetworks.gp.pangps.plist
    • launchctl load -S Aqua /Library/LaunchAgents/com.paloaltonetworks.gp.pangpa.plist
    • launchctl load -S Aqua /Library/LaunchAgents/com.paloaltonetworks.gp.pangps.plist
  4. Reboot the computer for the configuration changes

Linux

  1. Stop the GlobalProtect VPN daemon

    • sudo systemctl stop gpd.service
  2. Open pre-deployment configuration file at /opt/paloaltonetworks/globalprotect/pangps.xml
  3. Under <Settings>, change default-browser value to yes

  4. Reboot the computer in order for the pre-deployment configuration changes to take effect


Troubleshooting / Common Issues / FAQ

  • If you see the following SSO back button error, please follow these instructions to fix the issue:
    1. Uninstall the Global Protect Client (Uninstall the Global Protect App for Windows)

    2. Open a Command Prompt
    3. Run the following command in the same directory where you downloaded the Global Protect Client (MSI filename may be different):
      • msiexec.exe /i GlobalProtect64.msi DEFAULTBROWSER=YES

    4. Re-install the Client

SSO Back Button Error.png



If you need assistance, contact the OU Help Desk at [email protected] .