Body
What is VPN?
VPN stands for "Virtual Private Network." VPN software protects your online identity by masking your computer’s IP address, encrypting your data, and routing that information through a secure network (even while using a shared or public WiFi connection). This is an additional layer of protection to help keep Villanova’s users and networks secure, particularly when you are working remotely. Once you’ve installed the software, connect to GlobalProtect VPN service for your primary work activities.
How do I obtain GlobalProtect client logs for troubleshooting a connection issue?
See How to Collect Logs from GlobalProtect Clients
What should I do when I receive the following message after connecting to VPN: "Your device meets security standards for UNIT and is permitted to access privileged resources while connected to our VPN"?
There is no need to do anything. This message indicates your computer is meeting the University's requirements for access.
What policies govern the use of Villanova University's VPN service?
You must adhere to the Acceptable Use Policy, and the Network Policy when connected to the VPN service.
I was able to use RDP, Teamviewer, VNC, and other remote access applications on and off VPN, but I am unable to now. What has changed?
Villanova University is continually improving our security posture and only supports connectivity from Villanova owned and managed computers using these remote access applications. If you do not have a Villanova owned computer, Citrix vDesktop can be used as an alternative. Review the Remote Access Policy for more details.
What settings are enforced or checked when connected to Villanova University's VPN service?
The VPN service is configured to support current standards defined by UNIT and requirements of the Remote Access Policy and Network Policy.
What information is logged when on Villanova University's VPN service?
Data is logged for the purpose of protecting the user when on the network. This includes automatically blocking threats such as malicious links by our VPN appliance.
What should I do if I see Error Message: Connection Failed?
If you see an error message of "Connection Failed The network connection is unreachable or the portal is unresponsive. Check the network connection and reconnect" this typically implies the network connection to the Internet on your computer was unavailable. Once you are connected to the Internet, reconnect to the VPN with GlobalProtect.
How do I install GlobalProtect on Linux?
Presently, GlobalProtect on Linux is not officially supported and troubleshooting is limited. However, if you need access to the installers, please contact the UNIT Service Desk or (USA area code +1) 610-519-7777 and we will provide you with the instructions and the corresponding installer.
How do I uninstall GlobalProtect?
Follow the instructions below to uninstall GlobalProtect from:
Windows
macOS
I used to be able to connect to a resource on VPN, but it looks like that access is no longer available. What should I do?
If you experience this, please let us know using the Report VPN Connectivity and Support Form so we can review and correct the issue.
What is security posture checking and why is it being used for VPN connections?
Security posture checks help administrators ensure devices connected to the network are healthy and configured optimally so we can spend more time ensuring you have the access needed to reach University resources consistently.
How do I uninstall Pulse Secure?
For Windows, you can uninstall Pulse Secure from Control Panel > Add and Remove Programs. For macOS, move Applications > Junos Pulse.app to the Trash. For a complete removal of Pulse Secure folders and any other Pulse Secure file remnants, the vendor has provided the following instructions:
Windows
macOS
Linux
iOS
Can I use GlobalProtect in all countries?
No. To comply with regulations and sanctions enforced by the U.S. Office of Foreign Assets Control, services such as Microsoft Office 365, GlobalProtect, Zoom and Duo block authentication requests whose IP address originates in a country or region subject to economic and trade sanctions. These regions are updated from time to time but presently include:
- Cuba
- North Korea
- Iran
- Sudan
- Syria
- Crimea Region
- Donetsk Region
- Luhansk Region
- Sevastopol Region
What operating systems is GlobalProtect supported on?
UNIT provides support for GlobalProtect only on currently managed and supported operating systems in our environment. PaloAlto Global Protect client software is available for the following operating systems. To comply with our policies, if an operating system is no longer supported by the vendor such as Microsoft or Apple, and/or security updates and enhancements are not made available from the vendor, UNIT will also no longer support the GlobalProtect VPN solution on this operating system.
I am being prompted that "There is a newer version of GlobalProtect available for download." What should I do?
When the available version of the GlobalProtect VPN client has been upgraded, you will see the prompt above. You should click "Yes" in the download prompt to start the download. When the download finishes, a second prompt will ask you if you want to "Install now?". You should click "Yes" to start the installation process. You may be asked to restart your computer. Before clicking "yes" to restart, be sure to save any open files. During the installation, the VPN connection will be terminated and re-established.
What could be preventing me from logging in while using my personal VPN?
Access to Villanova University’s systems is not permitted when using an unauthorized VPN service. For more information, please refer to the Anonymized Network Access FAQ.
Do VPN sessions timeout?
VPN sessions have a maximum length of 12 hours, with a maximum idle time of 2 hours before the VPN disconnects.
Vendor Specific FAQ
Why can't I use the University's VPN portal ('vpn.villanova.edu')?
The University's main VPN portal can only be used by active, registered students and employees.
Who should pursue vendor VPN access?
3rd-party vendors, Alumni, and contractors who need remote access to Villanova's network.
What requirements are there for requesting access through the Vendor VPN portal ('vendorvpn.villanvoa.edu')?
All users of the Vendor VPN portal must have sponsorship from a Villanova employee and a guest user account (approved by HR). Users must also provide a signed Data Addendum and Certificate of Insurance.
How can I request a guest account for VPN access?
A sponsor (Villanova employee) can request an account using the Guest Accounts (Courtesy Card) form.
What is required as part of the Certificate of Insurance in order to have VPN access?
The details on what coverage is required for remote, unattended network access can be found under the "Off Campus" section of the website.
What can I access when connected to the portal 'vendorvpn.villanova.edu'?
As part of the request process, you will be asked about what resources you need to access. Once approved, access will be provisioned based on the applications, ports, and/or protocols provided.
I should be able to connect to the portal, 'vendorvpn.villanova.edu', but I can't reach a resource or I am receiving an error message. How can I request assistance?
To submit a support request for issues associated with connecting to or using the vendor VPN portal ('vendorvpn.villanova.edu'), please fill out the Report VPN Connectivity and Support Issue ticket.
I don't have a chance to login and keep receiving an error message - "Sorry, but we're having trouble signing you in.", what can I do to fix this?
If you are using a non-Villanova issued device which uses a username tied to another organization, you may have difficulty authenticating to GlobalProtect VPN; it may try to use your non-Villanova account to sign-in automatically. Follow the steps in the VPN: Creating an Edge Broswers Profile knowledge-based article.
Visit the VPN: Getting Started article to learn more about Duo.