GrizzVPN Instructions for Vendors

VPN Information

Oakland University provides Virtual Private Network (VPN) connectivity to vendors based on a limited basis. A VPN connection allows a vendor to remotely establish a secure network connection from their device to the Oakland University Network.

To enhance security the VPN is protected by DUO Multi-Factor-Access (MFA), more information on DUO is available HERE.

VPN Access Requirements

The following must be completed in order to start using the GrizzVPN:

• An OU point of contact must sponsor you for a Guest NetID account. Once a Guest NetID has been created, your OU sponsor will need to use this information to request VPN access by submitting the VPN Access Request form.

• Once VPN access is granted for your Guest NetID account, follow the instructions in the "Connecting to the GrizzVPN" section.

Connecting to the GrizzVPN

1. Go to the GrizzVPN portal to download the Global Protect client at https://grizzvpn.oakland.edu and login with your Guest NetID username, password, and DUO.

2. Download the correct Global Protect client / agent for your operating system. The portal has the following 32 / 64 bit clients available for download: Linux, Windows, and Mac.

3. After the client downloads, close the grizzvpn.oakland.edu portal page, and install the client. The portal page is only for client downloads, the client will be used to connect to the GrizzVPN.

4. After the client is installed, open the global protect client and enter grizzvpn.oakland.edu in the Portal field then click Connect.

5. You will be redirected to your default browser to authenticate. Login with your Guest NetID username, password, and DUO.

6. After successful authentication, you will be redirected to the following PaloAlto page. Click open GlobalProtect if you see the system dialog.

7. Verify the Global Protect client says Connected. The client can be found in the taskbar’s system tray.

8. When finished working or ready to disconnect from the VPN, open the Global Protect client and click Disconnect.

9. The next time you need to login into the GrizzVPN, open the Global Protect client, click Connect, and login with your Guest NetID username, password, and DUO.

Setting Global Protect to use the Default Browser

Windows

1. Uninstall the Global Protect Client (Uninstall the Global Protect App for Windows)

2. Open a Command Prompt
3. Run the following command in the same directory where you downloaded the Global Protect Client (MSI filename may be different):

   • msiexec.exe /i GlobalProtect64.msi DEFAULTBROWSER=YES

4. Re-install the Client

Mac

1. Open Terminal by either opening Spotlight Search and search for Terminal or Launchpad > Other > Terminal or Finder > Applications > Utilities > Terminal

2. Run the following command:

   • sudo defaults write /Library/Preferences/com.paloaltonetworks.GlobalProtect.settings.plist '{"Palo Alto Networks" ={GlobalProtect={Settings={default-browser=yes;};};};}'

3. Run the following commands:
   • launchctl unload -S Aqua /Library/LaunchAgents/com.paloaltonetworks.gp.pangpa.plist
   • launchctl unload -S Aqua /Library/LaunchAgents/com.paloaltonetworks.gp.pangps.plist
   • launchctl load -S Aqua /Library/LaunchAgents/com.paloaltonetworks.gp.pangpa.plist
   • launchctl load -S Aqua /Library/LaunchAgents/com.paloaltonetworks.gp.pangps.plist
4. Reboot the computer for the configuration changes

Linux

1. Stop the GlobalProtect VPN daemon

   • sudo systemctl stop gpd.service
2. Open pre-deployment configuration file at /opt/paloaltonetworks/globalprotect/pangps.xml

3. Under <Settings>, change default-browser value to yes

4. Reboot the computer in order for the pre-deployment configuration changes to take effect

Troubleshooting / Common Issues

• If you see the following SSO back button error, please follow these instructions to fix the issue:

  1. Uninstall the Global Protect Client (Uninstall the Global Protect App for Windows)

  2. Open a Command Prompt
  3. Run the following command in the same directory where you downloaded the Global Protect Client (MSI filename may be different):

     • msiexec.exe /i GlobalProtect64.msi DEFAULTBROWSER=YES

  4. Re-install the Client

• If you are using a Chromebook, install the Global Protect App from the Google Play Store (Install Global Protect App for Chromebook)

If you need assistance, contact the OU Help Desk at [email protected] .