Download Client
- Users can download the client software from the following locations.
- Microsoft Windows 32-bit version
- Microsoft Windows 64-bit version
- VPN portal by connecting to https://vpn.wsu.edu.
- Login with WSU AD credentials (this is the same credentials used for myWSU).
- No need for additional prefixes or suffixes.
- Example: john.smith@wsu.edu will only need username john.smith
After logging in, there will be several installation files available depending on operating system. Select the appropriate file and download it:
Installation and Configuration
Locate the downloaded file and click on it to execute it. Click next to continue.
Accept the default installation location (may vary depending on Windows version). Click next to continue.
Click next to continue.
Select Close to complete the installation.
Once the installation has finished, the Global Protect client should start automatically.
If not, either launch the Global Protect client from the start menu or by right clicking on the globe in the task bar on the lower left portion of the screen):
Enter the portal address for your campus (no https prefix) and then click Connect.
VPN Portal | Username Used to Access | Typical People to Use Portal |
WSU NID | All WSU Staff and Students | |
WSU NID | Everett Staff and Students | |
WSU NID | Spokane Staff and Students | |
WSU NID | Vancouver Staff and Students | |
WSU NID | Tricities Staff and Students |
The screenshots below are utilizing a portal of vpn.wsu.edu. However, the steps are the same for other campuses.
Once the Global Protect client connects to the portal, it will prompt for your username and password. Just enter your NID and then click "Sign In". Example: john.smith@wsu.edu will only need username john.smith.
Once a valid credential pair is entered, you will receive a prompt to choose your MFA option. You can use any MFA option that is supported by Okta, including SMS, App Push, Google Authenticator, Security Key, etc. Push notifications with the Okta Verify App are recommended.
When selecting Okta Verify Push notifications, it is recommended to select the option ‘Send push automatically’
While the option ‘Do not challenge me on this device for the next 24 hours’ option may be checked, this option will not have any effect. You will continue to be prompted for multi-factor authentication for every VPN login.
At this point, you should receive a multifactor prompt on your device or be ready to enter a code from a separate multi-factor app.
IOS Prompt
Once complete, the VPN should show as "Connected".
Operation
The Global Protect client should start automatically. It should appear in the systray in the lower right-hand corner of the screen in the form of a circular (globe) icon. Clicking on this icon will open the window that shows the status and the option to connect or disconnect.Be sure to disconnect the VPN when it is no longer in use.
Troubleshooting
Issue/Problem: After the install, Global Protect may not open or may not be able to connect to the portal even if the computer is connected to the network.
Solution:
- Verify the service pangps is installed and is running. To do this, open up the Windows Task Manager and select the "Services" tab. Looks for "PanGPS".
- If it is not installed or cannot start, uninstall and reinstall the client (may require elevated permissions).
Issue/Problem: On some Windows computers with out of date C++ files, when you install the GlobalProtect VPN Software you get an error "The file mfc120.dll is missing."
Solution
Reinstall the C++ Redistributable here: https://www.microsoft.com/en-us/download/confirmation.aspx?id=40784&6B49FDFB-8E5B-4B07-BC31-15695C5A2143=1
- Reboot the computer after reinstalling the C++ Redistributable
Uninstall the GlobalProtect VPN Software
Reboot the computer again after uninstall
Then reinstall GlobalProtect again
Operational Issues
If Global Protect is installed and pangps service is running, there may be other potential issues. If the client indicates login issues, this may be due to the account being locked out after too many attempts. Or it could be due to trying to login to a VPN that the user does not have access to.For other issues, it may be necessary to review the logs on the client machine. The pangps.log can be retrieved from the Global Protect application folder or through the client. On the client, click the settings icon in the upper right corner and then go to the troubleshooting tab. Press the "Collect Logs" button and save the zip file to an easily accessible folder location. Please submit a ticket to the Crimson Service Desk (crimsonservicedesk@wsu.edu) and include the debug logs created.