GlobalProtect VPN – Quick Reference (PittDigital)

What is GlobalProtect VPN?

GlobalProtect is the University of Pittsburgh’s official Virtual Private Network (VPN) client. It creates a secure, encrypted connection from your device to Pitt’s network, allowing you to safely access restricted University resources when off-campus or on public networks. Many services (such as departmental file servers, research systems, or remote desktop access to office computers) require the VPN for off-campus access and for on campus access when using wired connectivity.

Key Benefits

  • Privacy protection: Use for added safety and confidentiality for public and private network connections.
  • Improved security: Assist with ensuring University network security while connected on and off campus.
  • Increased Session Length: Supports longer sessions, avoiding timeout restrictions found in other VPN clients.
  • Mobility: Securely access University resources from anywhere, on or off campus.
  • Access restricted resources: Securely access a private network and share data remotely through public networks.
  • Improved network connectivity via a virtual private network (VPN): Easily and quickly establish long-distance, secure encrypted network connections with high throughput.

Downloading GlobalProtect 

  • Windows/macOS/Linux: Download the GlobalProtect installer from Pitt’s software site or VPN portal. Use the Pitt Software Download site (sign in with your Pitt credentials) or the GlobalProtect web portal at portal-palo.pitt.edu (often used for sponsored accounts). These sites provide the installers for Windows (MSI), Mac (PKG), and Linux (TGZ).
  • Mobile (iOS/Android): Install the GlobalProtect app from your device’s app store – it’s available for free on the Apple App Store and Google Play Store. (Note: The mobile apps may show version 6.0/6.1 in the store, which is expected. They are the latest mobile releases and will work with Pitt’s VPN service.)

Installation & Connection by Platform

Windows

  1. Install: Download the Windows installer and run it. Follow the GlobalProtect Setup Wizard and accept the default settings to complete the installation.
  2. Launch: After installation, open the GlobalProtect application from the Start Menu (it may start automatically in the system tray).
  3. Portal Setup: When prompted, enter the portal address portal-palo.pitt.edu as the VPN portal.
  4. Login: Sign in with your Pitt username and password. For the Duo multi-factor prompt, you can type push in the secondary password field to get a Duo Mobile notification, then approve the login on your phone. (Alternatively, use another Duo option like a passcode or phone call as needed.)

macOS

  1. Install: Download the Mac installer from Pitt’s software site and run it. Follow the on-screen prompts to install GlobalProtect. You may be prompted to enter your Mac admin password during installation.
  2. Allow Extensions (if prompted): During installation, you might see a request to install or allow “GlobalProtect System Extension”. Check any boxes to enable the GlobalProtect extension and click Install. If macOS displays a security warning, go to System Settings > Security & Privacy and allow the extension (approve the Palo Alto Networks software) to proceed.
  3. Launch: Once installed, open the GlobalProtect app (you can find it in Applications).
  4. Portal & Login: Enter portal-palo.pitt.edu as the portal address when prompted, then log in with your Pitt credentials. Approve the Duo two-factor authentication on your device to finish connecting. (The first time you connect, macOS may ask you to “Allow” GlobalProtect to set up a VPN connection — choose Allow.)

Linux

  1. Install: Download the Linux GlobalProtect package (a .tgz archive) from the Pitt download site. Extract the archive and run the installer script included. For example, in a terminal:
  2. tar -xvf Pan[insert download name]
  3. sudo ./gp_install.sh 

This will install the GlobalProtect client on your Linux system. (Choose the appropriate package if the script provides options for Debian/Ubuntu .deb or Red Hat/Fedora .rpm.)

  1. Launch & Connect: After installation, launch the GlobalProtect client. On some Linux distributions, you can launch a GUI from the applications menu; on others, you might use the command line (globalprotect launch). Enter portal-palo.pitt.edu as the portal address, then authenticate with your Pitt username and password. Approve the Duo MFA prompt (e.g. via your phone) to complete the VPN connection. (If you encounter issues launching the GUI, try logging out and back in, or consult the Linux section of Pitt’s VPN documentation for specific commands.)

iOS (iPhone/iPad)

  1. Install App: Open the App Store on your iPhone or iPad and install the GlobalProtect app by Palo Alto Networks.
  2. Initial Setup: Launch the GlobalProtect app. The first time you open it, tap Allow if prompted to let the app add VPN configurations to your device.
  3. Portal: When asked for a portal address, enter portal-palo.pitt.edu and tap Connect.
  4. Allow VPN Connections: When prompted select the option to Allow Global Protect to configure VPN Connections on your device.
  5. Login with Duo: A Pitt Passport login screen will appear. Sign in with your Pitt username and password, then approve the Duo push notification sent to your phone (or complete the chosen two-factor step) to establish the VPN connection. After approval, the app will show that you are connected to the VPN.

Android

  1. Install App: Open Google Play Store on your Android device and install the GlobalProtect app.
  2. Initial Setup: Launch the app and grant any required permissions (the app may ask to set up a VPN connection – choose Allow).
  3. Portal: Enter portal-palo.pitt.edu as the portal address and tap Connect.
  4. Login with Duo: Sign in with your Pitt username and password when prompted. Then approve the Duo authentication request (e.g. tap Approve in the Duo mobile app or use your second-factor method) to finish connecting. Once authenticated, the GlobalProtect app will indicate that the VPN is connected.

Common Issues & Troubleshooting

Certificate/Connection Errors:

  • Verify portal address is exactly portal-palo.pitt.edu
  • Check system date/time is correct
  • Ensure device has internet connection

Mac System Extension Blocked:

  • System Settings → Security & Privacy → Allow Palo Alto Networks

Duo Authentication Issues:

  • Type "push" when prompted for second password
  • Ensure Duo app is installed and active
  • Try OTP code as alternative

System Requirements

  • Windows: 10 or later (64-bit)
  • macOS: 10.15+ (Catalina through Sonoma)
  • iOS: 12+
  • Android: 8.0 (Oreo)+

Support Contact

Pitt IT Help Desk: 412-624-HELP (4357)
Mention you're using GlobalProtect 6.2.8 and specify your OS.

Print Article