What is it and why do I need it?
A Virtual Private Network (VPN) service creates a secure connection between your device and the campus network and is used when you need to access restricted networked resources from off campus. At Princeton, GlobalProtect is the VPN service that you can use to access protected resources remotely and is soon to become the primary VPN service for its reliability and ease of use. The instructions on this page are specific to the GlobalProtect service.
Accessing protected applications through the web
The easiest way to access protected applications is through the GlobalProtect Portal on the web. For this, all you need is a web browser. Some Princeton applications available through this portal are:
- Prime Portal (PeopleSoft Financials)
- Information Warehouse (Cognos)
- OnBase
- Stripes
To access any of these applications:
- Visit the GlobalProtect web portal.
- Enter your Princeton NetID, your password, and click Log in.
- The system will send a Duo request to your default device. Approve the Duo request.
- The GlobalProtect portal page displays with 'tiles' for the set of protected applications accessible through the portal. Click the tile for the application you want to access.
5. GlobalProtect makes a secure connection to the application and opens the application.
Important! Not all protected services are available through the web portal. If you know the application you are trying to reach remotely is a restricted service, and yet it is not listed in the portal, you will need to install GlobalProtect software on your device to access it remotely (described in the next section).
Accessing protected applications using software installed on your device
You will need to install GlobalProtect software to access a subset of Princeton’s protected resources, including:
- Central File Server / H: Drive / M: Drive
- RDP (remote desktop protocol) to desktop workstations
- SSH (Secure Shell) connections to Linux systems
Instructions for installing and using the software to access protected resources follow.
Installing GlobalProtect software
GlobalProtect software can be installed on Windows computers, Mac computers, mobile devices and tablets.
Note: To install GlobalProtect, you will need to use an account with the ability to install software, known as an administrator account.
-
-
Follow these steps to install the Global Protect app on your Windows laptop or desktop computer.
- Visit the GlobalProtect web portal.
- Enter your Princeton NetID, your password, and click Log in.
- Wait for Duo to send a request to your default device and approve the Duo request.
- To download, click on the GlobalProtect Agent (upper-right corner).
- Select your operating system (OS): Download Windows 64 bit GlobalProtect agent
Note: 32-bit Windows devices are rare these days. To verify whether your system is 32 or 64 bit, open the Settings app on your computer, then click System, About. You will need system administrative rights to install this software. - Click Run to download the appropriate agent.
- You will see the GlobalProtect Setup Wizard. The installer will guide you through the steps required to install the software. Click Next.
- On the Select Installation Folder screen, click Next.
- On the Confirm Installation screen, click Next.
- On the Account Control pop-up, enter an admin user name and password. You will be asked, “Do you want to allow this app to make changes to your device?” Click Yes.
- On the Installation Complete screen, click Close to exit.
-
-
Follow these steps to install the Global Protect app on your Mac laptop or desktop computer.
- Visit the GlobalProtect web portal.
- Enter your Princeton NetID, your password, and click Log in.
- Wait for Duo to send a request to your default device and approve the Duo request.
- To download, click on the GlobalProtect Agent (upper right corner).
- Select “Download Mac 32/64 bit GlobalProtect agent” to download the installer to your computer.
- Click Allow if prompted.
- Open the GlobalProtect file.
- You will see the “Welcome to the GlobalProtect Installer” screen. Click Continue.
- On the Custom Install screen, click Continue and click Continue again.
- On the Standard Install screen, click Install.
- Enter the admin user name and password for your system and click Install.
Note: For macOS 10.13 and later releases you must allow Palo Alto Networks in Mac Security & Privacy as part of your initial setup. If you are prompted with a system extension block, follow the on-screen instructions to allow GlobalProtect to install the extensions. Go to System Preferences > Security & Privacy > General and select Allow. Close the Security & Privacy window. - Click Close to finish the installation.
- If you see a “Do you want to move the “GlobalProtect” installer to the trash?” pop-up, click on Keep.
-
-
Follow these steps to install the Global Protect app on your mobile phone and tablet devices.
Install on Android devices:
- Download and install the GlobalProtect app from the Google Play Store. Open the app.
- Enter the portal address vpn.princeton.edu and tap Connect.
- Enter your NetID and password. Tap Login.
- Wait for Duo to send a request to your default device and approve the Duo request.
- Tap OK on the Connection request pop-up.
Install on iOS devices:
- Search for the GlobalProtect app on the App Store. Tap Get and agree the permissions to install the application. Open the app.
- Enter the portal address vpn.princeton.edu and tap Connect.
- Tap Allow on the dialog asking to give GlobalProtect permission to add VPN configurations. You will be prompted for your iOS device's PIN (or other authentication method).
- Enter your NetID and password. Tap Login.
- Wait for Duo to send a request to your default device and approve the Duo request.
Using GlobalProtect software to access protected services
-
-
To start GlobalProtect on your Windows or Mac computer:
- Click the GlobalProtect application icon (grey globe) in your system tray (Windows) or top menu bar (Mac).
- On the Welcome to GlobalProtect pop-up window, enter the portal address vpn.princeton.edu and click Connect.
- Note: On future logins you will not be asked to enter the portal address.
- When prompted, enter your Princeton netID and password, and click Login.
- Note: If you encounter a script error, click Yes to continue. This is a known error and is being investigated.
- The system will send a Duo request to your default device. Approve the Duo request.
- A brief pop-up will display after successful connection.
Tip! Click the GlobalProtect icon to verify ‘Connected’ status.
To disconnect from the GlobalProtect VPN service:
- From the system tray or menu bar, click the GlobalProtect application icon.
- Click Disconnect.
-
-
To start GlobalProtect on your mobile phone or tablet:
- Open the GlobalProtect app.
- Enter the portal address vpn.princeton.edu, and tap Connect.
Note: For iOS devices, tap Allow to give GlobalProtect permission to add VPN configurations, and enter your iOS device PIN (or other authentication method). - When prompted, enter your Princeton NetID and password, and tap Login.
- The system will send a Duo request to your default device. Approve the Duo request.
Note: For Android devices, tap OK on the Connection request pop-up window. - Global Protect will send a notification (Android) or display the VPN icon in the status bar (iOS) when you are connected to the service.
- With VPN service established, open the application you want to access.
To disconnect from the GlobalProtect VPN service:
- Select the GlobalProtect application icon from your home screen.
- Tap the Disconnect button.
How can I access the Central File Server remotely?
-
-
Please note: If you are off campus, you will need to make a VPN connection to the University before accessing the Central File Server. Once a VPN connection is established, follow the instructions below to access drives.
WINDOWS - Connecting to your Home (H:) Drive
- In the search box on the taskbar, enter My PC.
- Click on This PC to open the app.
- In the top pane of the This PC window, click the Computer tab.
- Click Map Network Drive and from the drop-down list select Map Network Drive.
- The Map Network Drive dialog box will open.
- In the Drive field: Select H: from the dropdown.
- In the Folder field type: \\files.princeton.edu\YourNetID
- If you want to remap to this drive the next time you log in, click the Reconnect at sign-in checkbox.
- Click Finish.
- If you are prompted for authentication, login with your PRINCETON\YourNetID and password.
- The drive is now mapped.
WINDOWS - Connecting to your (M:) Departmental Drive
- In the search box on the taskbar, enter \\files.princeton.edu\dept and press Enter.
- Expand the window by clicking on the maximize icon.
- You may be prompted to enter in your credentials. Enter your user name as “PRINCETON\yourNetID” and your password. Click OK.
- Click on your departmental folder in the list (a checkmark will display to the left of the name).
- Click on Home at the top of the window to display the header menu.
- On the header menu, click on Easy Access, and choose Map a Drive.
- On the Map Network Drive screen, you can change the drive letter (optional). Click the checkbox to the left of Reconnect at sign-in. Click Finish.
- The drive is now mapped.
-
-
Please note: If you are off campus, you will need to make a VPN connection to the University before accessing the Central File Server. Once a VPN connection is established, follow the instructions below to access drives.
MAC - save a link to your home drive (H:) on the desktop
- Click the Finder icon in the dock.
- Click Go on the menu bar.
- Click Connect to Server.
- In the Server address input box, enter smb://files.princeton.edu/YourNetID and click Connect.
- If you are prompted for authentication, login with your Princeton NetID and password.
- Right-click on the disk icon on the desktop labeled with YourNetID.
- Click on Make Alias.
- You will see a new disk icon on the desktop labeled: YourNetID alias.
MAC - save a link to your departmental drive (M:) in the Finder Sidebar
- Click on the Finder icon in the dock.
- Click on Finder on the menu bar.
- Click on Preferences.
- On the Sidebar tab, make sure “Connected servers” is checked under Locations.
- Close the Preferences window.
- On the menu bar, click Go.
- Click Connect to Server.
- In the Server address box, enter: smb://files.princeton.edu/dept and click Connect.
- Login with your Princeton NetID and password.
- Select your departmental folder among the list by clicking on it.
- Click on File in the menu bar.
- Click on Add to Sidebar.
- You will see a link to your folder appear under Favorites in the Sidebar on the left.
Important facts about VPN
- Not all systems require VPN for remote access.
- VPN encrypts traffic between devices and the campus network.
- As an extension of the Princeton network, VPN is subject to the University's information and technology-related policies.
- VPN requires multi-factor authentication (Duo).