Download Client

  • No need for additional prefixes or suffixes.
  • Example: will only need username john.smith

After logging in, there will be several installation files available depending on operating system. Select the appropriate file and download it:

Installation and Configuration

Locate the downloaded file and click on it to execute it. Click next to continue.

Accept the default installation location (may vary depending on Windows version). Click next to continue.

Click next to continue.

Select Close to complete the installation.

Once the installation has finished, the Global Protect client should start automatically.

If not, either launch the Global Protect client from the start menu or by right clicking on the globe in the task bar on the lower left portion of the screen):

Start Menu Option                                              Task Bar Option

Enter the portal address for your campus (no https prefix) and then click Connect.

VPN Portal

Username Used to Access

Typical People to Use Portal


All WSU Staff and Students


Everett Staff and Students


Spokane Staff and Students


Vancouver Staff and Students


Tricities Staff and Students

The screenshots below are utilizing a portal of  However, the steps are the same for other campuses.

Once the Global Protect client connects to the portal, it will prompt for your username and password. Just enter your NID and then click "Sign In". Example: will only need username john.smith.

Once a valid credential pair is entered, you will receive a prompt to choose your MFA option. You can use any MFA option that is supported by Okta, including SMS, App Push, Google Authenticator, Security Key, etc. Push notifications with the Okta Verify App are recommended.

When selecting Okta Verify Push notifications, it is recommended to select the option ‘Send push automatically’

While the option ‘Do not challenge me on this device for the next 24 hours’ option may be checked, this option will not have any effect. You will continue to be prompted for multi-factor authentication for every VPN login.

At this point, you should receive a multifactor prompt on your device or be ready to enter a code from a separate multi-factor app.

IOS Prompt

Once complete, the VPN should show as "Connected".


The Global Protect client should start automatically. It should appear in the systray in the lower right-hand corner of the screen in the form of a circular (globe) icon. Clicking on this icon will open the window that shows the status and the option to connect or disconnect.Be sure to disconnect the VPN when it is no longer in use.


Issue/Problem: After the install, Global Protect may not open or may not be able to connect to the portal even if the computer is connected to the network.


  • Verify the service pangps is installed and is running. To do this, open up the Windows Task Manager and select the "Services" tab.  Looks for "PanGPS".  
  • If it is not installed or cannot start, uninstall and reinstall the client (may require elevated permissions).

Issue/Problem: On some Windows computers with out of date C++ files, when you install the GlobalProtect VPN Software you get an error "The file mfc120.dll is missing." 


Operational Issues

If Global Protect is installed and pangps service is running, there may be other potential issues. If the client indicates login issues, this may be due to the account being locked out after too many attempts. Or it could be due to trying to login to a VPN that the user does not have access to.For other issues, it may be necessary to review the logs on the client machine. The pangps.log can be retrieved from the Global Protect application folder or through the client. On the client, click the settings icon in the upper right corner and then go to the troubleshooting tab. Press the "Collect Logs" button and save the zip file to an easily accessible folder location.  Please submit a ticket to the Crimson Service Desk ( and include the debug logs created.