This article will demonstrate how to install and use the Palo Alto GlobalProtect ZTNA/VPN, which is required to access certain shared drives or services required by Deakin.

Installation Instructions

1. Open your browser to: https://ztna.deakin.edu.au
   
   
2. Login the portal page via your Deakin Username and Deakin Password
   
   
   
   
3. You can access the ZTNA download page after you login to the page successfully.
   
    
   
   
4. Select 'Download Mac 32/64 bit GlobalProtect agent' (that corresponds to the operating system running on your computer).
   
    
   
   
5. Once the file has finished downloading, navigate to your Downloads folder.
   
   Open the software installation file 'GlobalProtect.pkg'.
   
   
   
   
6. From the GlobalProtect Installer, click 'Continue'.
   
   

   On the Destination Select screen, select the installation folder for the GlobalProtect app, and then click 'Continue'.

   On the Installation Type screen, select the GlobalProtect installation package check box.

    

7. Click 'Install' to confirm that you want to install GlobalProtect.
   
   
   
   
8. When prompted, enter your Username and Password, and then click 'Install Software' to begin the installation.
   
   
   
   
9. After installation is complete, Close the installer.

Using GlobalProtect

1. Whenever you log into your computer, the GlobalProtect Client will automatically be docked in your app tray.
   
   

   There is a limited number of icons that can be displayed in the app tray at one time. If the GlobalProtect is not visible, you can remove any unwanted applications from being displayed via "Settings" -> "Menu bar".

   
   If it's not open, navigate to your Applications, search for, and open, GlobalProtect Client.
   
    
   
   

1. In the window that opens up, enter the Portal 'ztna.deakin.edu.au', then select "Connect".

Be mindful, there is a limited number of icons that can be displayed, so if you run the application and the icon doesn't appear, visit Settings-> Menu Bar and remove an unwanted applications.

           

1. A pop-up window will appear. Enter your Deakin Username, and your Deakin Password.
   

   Select 'Approve with DUO' to verify your identity, then it pushes notification to your smartphone DUO app to get approval. 

   
   
    

2. A notification will pop up on your screen to Approve or Reject. Hit the green tick (Approve)
   
    
   
   
3. If your smartphone does not have Internet connectivity and is not connected to a Wi-Fi network, you can use a Duo Mobile passcode.
   
   

   Select 'Other Options' on the Duo Push page, then choose 'Duo Mobile passcode'

   

   Select "Enter a Passcode" and enter the generated 6-digit passcode on your phone in the Passcode field.

   

   To generate the passcode on your phone

    
   
   
4.  If all log-in information is correct, you should log in successfully after a brief period of GlobalProtect loading.

   Once a user is authenticated by the portal, the GlobalProtect window will display 'Connected' and the 'Best Available Gateway' will be assigned to user.

   

   By default, users will be connected to 'Best Available Gateway' automatically. 

   The GlobalProtect uses a network discovery method to select the best available gateway from the multiple available gateway options ('Deakin Private Access-BW', 'Deakin Private Access-WF', 'Full Internet Proxy-BW' and 'Full Internet Proxy-WF').

   GlobalProtect attempts to communicate with all the gateways and uses criteria such as gateway priority, load, and response time from each gateway to determine which is the best available gateway

5. Users will be connected to one of the gateways ('Deakin Private Access-BW' or 'Deakin Private Access-WF') as the 'Best Available Gateway'. Both of them are unencrypted. If you need to connect to an encrypted gateway, click 'Change Gateway' then select the 'Full Internet Proxy'
   
   

   

   Deakin Private Access is for the user on a "Trusted" Wi-Fi network such as your home Wi-Fi.
   Full Internet Proxy access is for the user on public Wi-Fi or working overseas.

6. If you need to disconnect, click the burger icon on the right top of the application, then choose the "Disconnect" button.
   
   

   Next time you need to connect to the ZTNA/VPN, please be aware you will be prompted to sign in again.