GrizzVPN and Global Protect Instructions for Faculty/Staff

An explanation of what GrizzVPN is, how to connect to it and setting Global Protect to use the default browser.

Oakland University provides Virtual Private Network (VPN) connectivity to faculty and staff to access on campus computing resources from remote locations. A VPN connection allows the user to remotely establish a secure network connection from their device to the Oakland University Network.

Who is Eligible?

Active Faculty or Staff

Regulations

Export of CU Boulder VPN Client ("Client") is subject to controls and restrictions specified by the United States Department of Commerce under the Export Administration Regulations.

The Client may not be downloaded or otherwise exported to Cuba, Iran, Libya, North Korea, Sudan, and Syria, or to any person who is on the U.S. Commerce Department's Table of Denial Orders or one of the Treasury Department's exclusion lists. By downloading the Client, you are agreeing to the forgoing, and you are representing and warranting that you are not located in, or a national or resident of, any such country or on any such list.

Further, you must agree that you will not knowingly export or transfer, whether directly or indirectly, the Software or any system containing such Software to anyone outside the country of delivery without first obtaining a license or verifying that a license has been obtained from the United States Department of Commerce, and satisfying all requirements of the International Traffic in Arms Regulations and the Export Administration Act, as required.

By downloading and/or using this software, you certify that you are eligible to receive products exported from the United States, without any restriction under either a U.S. Commerce Department Denial Order or under a U.S. Treasury Department exclusion list. You also understand that any country to which you wish to export this software may have varying requirements and that it is your sole responsibility to be sure you understand and comply with foreign laws regarding the import/export and use of this product.

Connecting to the GrizzVPN

1. Go to the GrizzVPN portal to download the Global Protect client at https://grizzvpn.oakland.edu and login with your NetID username, password, and Duo.
2. Download the correct Global Protect client/agent for your operating system. The portal has the following 32/64 bit clients available for download: Linux, Windows, and Mac.
   • If you are using Windows and are unsure which version to choose, you can check by selecting the start menu and type "About your PC".
   • Under "Device Specifications", System type will list if the system is a 32-bit or 64-bit operating system. Most systems will be 64-bit.
3. After the client downloads, close the grizzvpn.oakland.edu portal page, and install the client. The portal page is only for client downloads, the client will be used to connect to the GrizzVPN.
4.  After the client is installed, open the “Global Protect” client. If you do not see Global Protect open, it will be located in your taskbar with an icon of the globe.
5. Enter "grizzvpn.oakland.edu" in the Portal field and then click Connect.
6. You will be redirected to your default browser to authenticate. Login with your NetID username, password, and Duo.
   • If you need to edit settings for the VPN, you can select the 3 lines at the top right.
7. After successful authentication, you will be redirected to the “paloalto” page. Click open “GlobalProtect” if you see the system dialog.
8. Verify the Global Protect client says “Connected” by hovering over the icon in the taskbar.
9. When finished working, or ready to disconnect from the VPN, open the Global Protect tab and click “Disconnect”.
10. The next time you need to login into the GrizzVPN, open the Global Protect client, click “Connect”, and login with your NetID username, password, and Duo.

Setting Global Protect to use the Default Browser

Windows

1. Uninstall the Global Protect Client (Uninstall the Global Protect App for Windows).
2. Open a Command Prompt.
3. Run the following command in the same directory where you downloaded the Global Protect Client (MSI filename may be different):
   • msiexec.exe /i GlobalProtect64.msi DEFAULTBROWSER=YES
4. Re-install the Client.

Mac

1. Open Terminal by either opening Spotlight Search and search for Terminal or Launchpad > Other > Terminal or Finder > Applications > Utilities > Terminal
2. Run the following command:
   • sudo defaults write /Library/Preferences/com.paloaltonetworks.GlobalProtect.settings.plist '{"Palo Alto Networks" ={GlobalProtect={Settings={default-browser=yes;};};};}'
3. Run the following commands:
   • launchctl unload -S Aqua /Library/LaunchAgents/com.paloaltonetworks.gp.pangpa.plist
   • launchctl unload -S Aqua /Library/LaunchAgents/com.paloaltonetworks.gp.pangps.plist
   • launchctl load -S Aqua /Library/LaunchAgents/com.paloaltonetworks.gp.pangpa.plist
   • launchctl load -S Aqua /Library/LaunchAgents/com.paloaltonetworks.gp.pangps.plist
4. Reboot the computer for the configuration changes

Linux

1. Stop the GlobalProtect VPN daemon
   • sudo systemctl stop gpd.service
2. Open pre-deployment configuration file at /opt/paloaltonetworks/globalprotect/pangps.xml
3. Under <Settings>, change default-browser value to yes
4. Reboot the computer in order for the pre-deployment configuration changes to take effect

If you see the error stating “You may be seeing this page because you used the Back button…”, please follow these instructions to fix the issue:

1. Uninstall the Global Protect Client (Uninstall the Global Protect App for Windows).
2. Open a Command Prompt.
3. Run the following command in the same directory where you downloaded the Global Protect Client (MSI filename may be different):
   • msiexec.exe /i GlobalProtect64.msi DEFAULTBROWSER=YES
4. Re-install the Client.

Additional Support

• OU Technology Center
• 44 Oakland Center
• Rochester, MI 48309-4479
• (248) 370-4357
• Office Hours: M-F 8:00am - 5:00pm