GrizzVPN Instructions for Faculty and Staff

VPN Information

Oakland University provides Virtual Private Network (VPN) connectivity to faculty and staff to access on campus computing resources from remote locations. A VPN connection allows the user to remotely establish a secure network connection from their device to the Oakland University Network.

To enhance security the VPN is protected by DUO Multi-Factor-Access (MFA), more information on DUO is available HERE.

Connecting to the GrizzVPN

1. Go to the GrizzVPN portal to download the Global Protect client at https://grizzvpn.oakland.edu and login with your NetID username, password, and DUO.

2. Download the correct Global Protect client / agent for your operating system. The portal has the following 32 / 64 bit clients available for download: Linux, Windows, and Mac.

1. If you are using Windows and are unsure which version to choose, you can check by selecting the start menu and type "About your PC".
2. Under "Device Specifications", System type will list if the system is 32-bit or 64-bit operating system. Most systems will be 64-bit.

3. After the client downloads, close the grizzvpn.oakland.edu portal page, and install the client. The portal page is only for client downloads, the client will be used to connect to the GrizzVPN.

4. After the client is installed, open the Global Protect client. If you do not see Global Protect open, it will be located in your taskbar with an icon that looks like below.

5. Enter "grizzvpn.oakland.edu" in the Portal field and then click Connect.

5. You will be redirected to your default browser to authenticate. Login with your NetID username, password, and DUO.

1. If you need to edit settings for the VPN, you can select the 3 lines or the hamburger button at the top right

6. After successful authentication, you will be redirected to the following PaloAlto page. Click open GlobalProtect if you see the system dialog.

7. Verify the Global Protect client says Connected. The client can be found in the taskbar’s system tray.

8. When finished working or ready to disconnect from the VPN, open the Global Protect client and click Disconnect.

9. The next time you need to login into the GrizzVPN, open the Global Protect client, click Connect, and login with your NetID username, password, and DUO.

How do I access my work computer?

The VPN connection can be used to connect remotely to your Oakland University Work PC. Instructions on setting up your work PC for remote connectivity can be found here: How do I connect to my work computer

Setting Global Protect to use the Default Browser

Windows

1. Uninstall the Global Protect Client (Uninstall the Global Protect App for Windows)

2. Open a Command Prompt
3. Run the following command in the same directory where you downloaded the Global Protect Client (MSI filename may be different):

   • msiexec.exe /i GlobalProtect64.msi DEFAULTBROWSER=YES

4. Re-install the Client

Mac

1. Open Terminal by either opening Spotlight Search and search for Terminal or Launchpad > Other > Terminal or Finder > Applications > Utilities > Terminal

2. Run the following command:

   • sudo defaults write /Library/Preferences/com.paloaltonetworks.GlobalProtect.settings.plist '{"Palo Alto Networks" ={GlobalProtect={Settings={default-browser=yes;};};};}'

3. Run the following commands:
   • launchctl unload -S Aqua /Library/LaunchAgents/com.paloaltonetworks.gp.pangpa.plist
   • launchctl unload -S Aqua /Library/LaunchAgents/com.paloaltonetworks.gp.pangps.plist
   • launchctl load -S Aqua /Library/LaunchAgents/com.paloaltonetworks.gp.pangpa.plist
   • launchctl load -S Aqua /Library/LaunchAgents/com.paloaltonetworks.gp.pangps.plist
4. Reboot the computer for the configuration changes

Linux

1. Stop the GlobalProtect VPN daemon

   • sudo systemctl stop gpd.service
2. Open pre-deployment configuration file at /opt/paloaltonetworks/globalprotect/pangps.xml

3. Under <Settings>, change default-browser value to yes

4. Reboot the computer in order for the pre-deployment configuration changes to take effect

Troubleshooting / Common Issues / FAQ

• If you see the following SSO back button error, please follow these instructions to fix the issue:

  1. Uninstall the Global Protect Client (Uninstall the Global Protect App for Windows)

  2. Open a Command Prompt
  3. Run the following command in the same directory where you downloaded the Global Protect Client (MSI filename may be different):

     • msiexec.exe /i GlobalProtect64.msi DEFAULTBROWSER=YES

  4. Re-install the Client

• If you are using a Chromebook, install the Global Protect App from the Google Play Store (Install Global Protect App for Chromebook)

If you need assistance, contact the OU Help Desk at [email protected] .