Set Up the Palo Alto GlobalProtect VPN - Windows 10
This manual should be used to download, install and connect to the Teachers College GlobalProtect VPN on a Windows 10 device.
- Open up a web browser, and navigate to the GlobalProtect VPN Portal at https://tcvpn.tc.columbia.edu
2. Login with your TC-supplied Active Directory credentials (No need to put TC\ in front of your username to define the domain).
3. Please Note: If your login attempt fails with an error message of The username you have entered cannot authenticate with Duo Security, please contact TC's Service Desk at firstname.lastname@example.org to have your Duo MFA tied to your Active Directory account.
4. If authentication is successful, you'll receive a Duo authentication prompt on your 2nd factor device for GlobalProtect Portal access. Approve the login request to continue.
5. Download the correct GlobalProtect VPN client version for your host machine (Windows 32/64-bit).
6. Install the GlobalProtect VPN client, and run it.
7. The client will ask for your portal address upon first open. Enter in the Portal Address: tcvpn.tc.columbia.edu, and click Connect.
8. You'll be prompted to enter a username/password. Please enter your Active Directory credentials and click Sign In.
9. You'll receive a Duo authentication prompt on your 2nd factor device for GlobalProtect Gateway authentication. Approve the login request to continue.
10. Once the client successfully connects, you'll have remote access to your TC on-premise resources.
11. A welcome page will also pop up upon initial connection. If you wish to disable permanently, check Do not show this again in the bottom right and close the window.
12. If for any reason you're not prompted to connect to the GlobalProtect Gateway upon first open, you can do so manually. Press the Settings icon in the top-right corner of the client.
13. Under the Portals section, click Add.
14. Enter in the Portal Address: tcvpn.tc.columbia.edu, and click Save.
15. Close out of the GlobalProtect Settings, and click Connect.
16. During the connection process, you'll see the message Still Working... while Duo authentication is taking place.
17. Approve the Duo authentication prompt to connect.
18. Once the client successfully connects, you'll have access to your TC on-premise resources.
Note: If you don't have access to required on-premise resources, please send Service Desk an email at email@example.com with the description and IP address of the unavailable resource(s).
19. If you need to authenticate with a different Active Directory account or re-login because of an updated Active Directory password, open up the GlobalProtect Client Settings.
20. Click Sign Out under the Account section.
21. Click OK to remove the existing credentials.
22. Close the Settings window.
23. Login again with your Active Directory credentials to get connected.
24. Once the client successfully connects, you'll have access to your TC on-premise resources.