Body
1.0 Audience
Identify the intended audience for this document. Select all that apply:
- Students
- Employees (Staff, Faculty)
2.0 Purpose
This article provides instructions for installing and configuring the GlobalProtect VPN on personal or Mines-owned computers that are not managed by the Mines IT Department. It includes steps for Windows, macOS, and supported Linux distributions. VPN access is required to reach internal network resources such as remote desktops, mapped drives, and hosted services.
3.0 Instructions
Table of Contents
Overview
Personal or work computers that are not managed by the Mines IT Department may require the GlobalProtect VPN to access internal network resources. Examples of resources that require GlobalProtect:
- Remote desktop into an on campus system
- Mapped Network Drives
- Hosted Services
VPN/GlobalProtect installation requires following the security steps outlined in this article. By adhering to these safeguards, you're helping to protect our network and maintain secure access for all users.
Visit https://download.mines.edu/GlobalProtect/ and select the applicable version.
Windows & macOS
Double-click the downloaded package and proceed through the installation wizard (administrator rights are required.)
Enter 'globalprotect.mines.edu' into the Portal field.
Supported Linux versions
-
Modern Debian variants, including Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, & Ubuntu 24.04 LTS, run command from directory in which the downloaded file resides:
-
Redhat Enterprise Linux 9 (plus any compatible variants) and Fedora 40/41, run command from directory in which the downloaded file resides:
In order to connect to GlobalProtect, your system must pass HIP Checks to ensure it meets certain security requirements:
Follow the instructions below to complete HIP checks via GlobalProtect.
1. Open GlobalProtect and make sure you're connected. Locate and click on the hamburger icon in GlobalProtect. Click Settings.
2. On the left-hand side of the Settings screen, click on the Host Information Profile section.
3. Expand categories and look for anti-malware, firewall, and patch-management.
4. Under each of these you can dig down to find what needs to be enabled and whether or not it is enabled.
a. Anti-malware: look for anti-malware in the menu and locate the products listed under this category. Click on your anti-malware software (there may be multiple). Under the Product Info, look for Real Time Protection--if it says yes, your anti-malware is enabled.
b. Firewall: look for firewall in the menu and locate the products listed under this category. Click on your firewall software (there may be multiple). Under the Product Info, look to see if your firewall software is enabled (if it says yes, it is enabled).
c. Patch-Management: look for patch-management in the menu and locate the products listed under this category. Click on your patch-management software (there may be multiple). Under the Product Info, look to see if your patch-management software is enabled (if it says yes, it is enabled).
After your computer passes HIP checks, you must complete a form to request access to internal resources (e.g., remote desktop into an on campus system, mapped network drives, hosted servers). To request access to internal resources, fill out this form.
Enable a Firewall
Ensure your device has an active and supported firewall. If the Active Firewall HIP check fails, you’ll see this message in GlobalProtect VPN: "No firewall detected: Please enable a firewall.”
To resolve this:
-
Windows: Enable your system's built-in firewall by following the instructions outlined in this article.
-
MacOS Ensure your Mac's firewall settings are properly configured. Select your MacOS version on this site for detailed instructions.
-
Linux On supported Linux machines (Modern Debian variants, including: Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, & Ubuntu 24.04 LTS, Redhat Enterprise Linux 9 (plus any compatible variants) and Fedora 40/41) please run:
-
Red Hat Enterprise Linux 9 & Variants / Fedora:
-
sudo systemctl status firewalld ← should show as being active. If not then activate:
-
Debian / Ubuntu Variants:
-
sudo ufw status ← should show as being active. If not then activate:
Enable Automatic Updates
Your system must have an active package-management or auto-update solution. Recommendations:
-
Windows Enable automatic updates on your system by following the instructions outlined in this article.
-
MacOS Enable automatic updates to keep your Mac secure. Choose your MacOS version on this site for for step-by-step guidance.
-
Linux On supported Linux machines, Debian and Redhat/Fedora variants also feature a “software update” service that notifies about or auto-updates core packages, as needed.
Install and Enable Real-Time Anti-Malware Protection
If the "Anti-Malware" HIP check fails, GlobalProtect VPN will display: “No Anti-Malware software found.”
To resolve this: Install a supported anti-malware solution with real-time protection. Examples include:
- Malwarebytes
- McAfee
- Bitdefender
- ClamAV
Ensure the software is installed, updated, and running with real-time protections enabled.
4.0 Definitions
- GlobalProtect VPN: A secure virtual private network client used to access Mines’ internal resources.
- HIP (Host Information Profile): Security checks that verify your system has active anti-malware, firewall, and automatic updates.