This article will demonstrate how to install and use Palo Alto GlobalProtect ZTNA/VPN, which is required to access certain shared drives or services required by Deakin.

Installation Instructions

1. Launch the App Store, and search for "GlobalProtect" and make sure that it is published by Palo Alto Networks.
   
   

   Note: It is very important that you do not download any programs attempting to impersonate Palo or GlobalProtect as a product. If you are unsure which app to download, please contact the IT Service Desk.

   From the GlobalProtect app product page, tap 'Get'.

   
   
   
   

   When the installation is complete, tap OPEN to launch GlobalProtect.

Using GlobalProtect

Note: ZTNA/VPN services require you to use Multi Factor Authentication (MFA).

1. Once finished installing, either open GlobalProtect through the "Open" button in the Apple Store, or navigate back to your apps and locate GlobalProtect.
   
   
2. Launch the GlobalProtect app.
   

   When prompted for allowing GlobalProtect to send you notification, press 'Allow'. 

   Read the 'Your Privacy', then 'Continue'. 

   Enter the Portal 'ztna-mobile.net.deakin.edu.au', then select "Connect".        

   
   

3. A pop-up window will appear. Enter your Deakin Username, and your Deakin Password.
   

   Select 'Approve with DUO' to verify your identity, then it pushes notification to your smartphone DUO app to get approval.        

    

4. A notification will pop up on your screen to Approve or Reject. Hit the green tick (Approve)
   
    
   
   
5. If your smartphone does not have Internet connectivity and is not connected to a Wi-Fi network, you can use a Duo Mobile passcode.
   

   Select 'Other Options' on the Duo Push page, then choose 'Duo Mobile passcode'

    

    

   Select "Enter a Passcode” and enter the generated 6-digit passcode on your phone in the Passcode field.

   

   To generate the passcode on your phone
   
    

6. After authenticated, press 'Open' the page in "GlobalProtect".
   

   When the home screen appears, verify that your connection has established successfully. If the connection is successful, the home screen displays the CONNECTED state.

    

   By default, user will be connected to 'Best Available Gateway' automatically. 

   The GlobalProtect uses a network discovery method to select the best available gateway from the multiple available gateway options ('ZTNA-Gateway-BW' and 'ZTNA-Gateway-WF').

   GlobalProtect attempts to communicate with all the gateways and uses criteria such as gateway priority, load, and response time from each gateway to determine which is the best available gateway

7. User will be conencted to one of the gateways ('ZTNA-Gateway-BW' or 'ZTNA-Gateway-WF') as the 'Best Available Gateway'. Both of them are unencrypted gateway.
   

   If you need to connect to encrypted gateway, click 'Change Gateway' then select the 'ZTNA-Encrypted-Gateway' 

   

   Unencrypted access is for the user on a "Trusted" Wi-Fi network such as your home Wi-Fi.
   Encrypted access is for the user on public Wi-Fi or working overseas.

8.  If you need to disconnect, you can TAP TO DISCONNECT from the home screen.
   
   Next time you need to connect to the ZTNA/VPN, please be aware you will be prompted to sign in again.