Integrated Virtual Private Network (ivpn) Access Setup Guide

The Virtual Private Network (VPN) allows current staff and students to securely connect to the campus network from outside the university and access campus resources as if they were on-campus. To use the VPN service, the off-campus remote computers or mobile devices must have the VPN client software installed and users will always be prompted to authenticate upon connection. Once successfully authenticated, a secured and encrypted VPN connection will be established to allow remote access to the authorised resources on the campus network.

    1. For Computers running Microsoft Windows or Mac OS

      1.1 VPN Client Agent Installation
      1.2 Setup VPN Portal Address and Connect

    2. For mobile devices running iOS

    3. For mobile devices running Android

    4. Frequently Asked Questions (FAQs)

1. For Computers running Microsoft Windows or Mac OS

1.1 VPN Client Agent Installation

  1. Use a web browser to visit the "CityUHK VPN portal" at https://ivpn.cityu.edu.hk.

  2. You will be redirected to the CityUHK sign-in page. Please enter your CItyUHK EID and password, then click "Sign In" to log in via Okta.

    3. CityUHK sign-in page

  3. In the "Okta Verify" menu, click "Send Push" or "Enter Code". Then, check the "Okta Verify App" on your mobile phone.
    1. Click "Yes, it's me" on on the mobile app to confirm (if you selected "Send Push")
    2. Enter the one-time password shown on the mobile app (if you selected "Enter Code")

      3. Okta Verify menu

  4. After successful login, You will see the Palo Alto GlobalProtect portal page.

    5. VPN Connection

  5. You may download the appropriate version of the GlobalProtect agent according to your computer's Operating System (O/S).
    (Note: For Windows users, if you are not sure to use the 32-bit or the 64-bit GlobalProtect agent, please refer to Q2 of the FAQs).

    6. Computers Download Option
    For 32-bit Windows O/S Windows 32-bit GlobalProtect agent
    For Windows 10 and above Windows 64-bit GlobalProtect agent
    For Apple Mac O/S 13 and above Mac 32/64-bit GlobalProtect agent

  6. After downloading the GlobalProtect agent software, you can install it on your computer according to setup wizard.

    7. Palo Alto GlobalProtect Setup Wizard

  7. After successful installation, you will find the GlobalProtect icon in the system tray of your computer:

    8. Palo Alto GlobalProtect icon

1.2 Setup VPN Portal Address and Connect

  1. You can invoke the GlobalProtect agent by clicking the GlobalProtect icon in the system tray.
  2. When the "Welcome!" menu appear, click "Get Started" to proceed.

    3. Welcome menu

  3. Enter the Portal Address "ivpn.cityu.edu.hk" in the address field and click "Connect".

    4. Portal Address

  4. Or click on the Settings menu, edit edit or add add portal address "ivpn.cityu.edu.hk" under Connections settings.

    5. Portal Address

    Connection Status
  5. The sytem will redirect you to the CityUHK sign-in page. Please enter your CityUHK EID and password to sign in.

    6. CityUHK sign-in page

  6. Authentication will go through Okta process, same as Step 3 under Section 1.1: VPN Client Agent Installation of this guideline.

  7. When the "Open GlobalProtect?" menu appears, click "Open GlobalProtect". The GlobalProtect icon on the system tray will change from "GlobalProtect Disconnected" to "GlobalProtect Connected" upon successful login.

    8. paloalto Authentication Complete.

    GlobalProtect Connected

  8. For subsequent connection, navigate to system tray area and click on the GlobalProtect icon. Click "Connect" at the agent dialog box.

    9. GlobalProtect Not Connected GlobalProtect Disconnected

  9. Follow the login and authentication process under aforesaid steps 5 and 6.

2. For mobile devices running iOS

  1. Search and install the app in App Store.

    2. GlobalProtect in App Store

  2. Launch the app GlobalProtect App

  3. Setup GlobalProtect Gateway Address (ivpn.cityu.edu.hk).

    4. Settings Address Status

  4. Click "TAP TO CONNECT" and login, go through the authentication process. You will see "CONNECTED" on app.

    5. Tap to Connect Sign-in Connected

3. For mobile devices running Android

  1. Search and install the app in Play Store.

    2. GlobalProtect in Google Play

  2. Launch the app GlobalProtect App

  3. Setup GlobalProtect Gateway Address (ivpn.cityu.edu.hk).

    4. Portal Address Settings Address
    Status

  4. Click "TAP TO CONNECT" and login, go through the authentication process. You will see "CONNECTED" on app.

    5. Tap to Connect Sign-in Connected

4. Frequently Asked Questions (FAQs)

Q1: When I login the VPN, the software prompt for update, what should I do??

Q2: My computer is running Microsoft Windows. Which one should I install among the "Windows 32-bit GlobalProtect agent" and "Windows 64-bit GlobalProtect agent"?

Q3: I cannot successfully re-install the new GlobalProtect agent because my computer has installed old GlobalProtect software. What should I do?

Q4: On Windows, the GlobalProtect software hanging and show connecting but not connected and could not manually refresh/disconnect the attempt.

Q1: When I login the VPN, the software prompt for update, what should I do?

A1: If you are using the agent with outdated version, the system will prompt for update as below screen.

    GlobalProtect Update

    Steps to udpate the agent:

    1. Click "Yes" when the system prompt for update, then wait for download.

    2. After the download completed, you will see below prompt and click "Yes" to install.

      3. GlobalProtect Update

    3. After the installation, system will start VPN connection and prompt for Okta authentication.

    4. Authentication will go through Okta process, same as step 3 under Section 1.1: VPN Client Agent Installation of this guideline.

Q2: My computer is running Microsoft Windows. Which one should I install among the "Windows 32-bit GlobalProtect agent" and "Windows 64-bit GlobalProtect agent"?

A2: Most modern PCs are pre-installed with 64-bit Windows operating system. If you want to confirm which version of Windows you are using, you may use the following steps:

  1. Click the Start button, then select Settings ➔ System ➔ About;

  2. Locate your System type under "Device Specifications".

    3. System > About

Q3: I cannot successfully re-install the new GlobalProtect agent because my computer has installed old GlobalProtect software. What should I do?

A3: You should uninstall the old GlobalProtect agent before installing the new GlobalProtect agent.

Q4: On Windows, the GlobalProtect software hanging and show connecting but not connected and could not manually refresh/disconnect the attempt.

    Connecting...

A4: Open the "Task Manager" and kill the process "Global Protect client" via "End task", the Global Protect agent will re-run, and you can try to connect again.

    Task Manager...

 

IT.ServiceDesk@cityu.edu.hk