VPN Connection Setup Guide

The Virtual Private Network (VPN) allows current staff and students to securely connect to the campus network from outside the university and access campus resources as if they were on-campus. To use the VPN service, the off-campus remote computers or mobile devices must have the VPN client software installed and users will always be prompted to authenticate upon connection. Once successfully authenticated, a secured and encrypted VPN connection will be established to allow remote access to the authorised resources on the campus network.

    1. VPN Client Agent Installation

    2. Setup VPN Portal Address

    3. VPN Connection

    4. Frequently Asked Questions (FAQs)

1. VPN Client Agent Installation

  1. Use a web browser to visit the "CityU VPN portal" at https://ivpn.cityu.edu.hk.

  2. You will be redirected to the CityU sign-in page. Please enter your EID and password, then click "Sign In" to log in via Okta.

    3. CityU sign-in page

  3. In the "Okta Verify" menu, click "Send Push" or "Enter Code". Then, check the "Okta Verify App" on your mobile phone.
    1. Click "Yes, it's me" on on the mobile app to confirm (if you selected "Send Push")
    2. Enter the one-time password shown on the mobile app (if you selected "Enter Code")

      3. Okta Verify menu

  4. After successful login, You will see the Palo Alto GlobalProtect portal page.

    5. VPN Connection

  5. You may download the appropriate version of the GlobalProtect agent according to your computer's Operating System (O/S).
    (Note: For Windows users, if you are not sure to use the 32-bit or the 64-bit GlobalProtect agent, please refer to Q2 of the FAQs).

    6. Computers Download Option
    For 32-bit Windows O/S Download Windows 32-bit GlobalProtect agent
    For Windows 10 and above Download Windows 64-bit GlobalProtect agent
    For Apple Mac O/S Download Mac 32/64-bit GlobalProtect agent

  6. After downloading the GlobalProtect agent software, you can install it on your computer according to setup wizard.

    7. Palo Alto GlobalProtect Setup Wizard

  7. After successful installation, you will find the GlobalProtect icon in the system tray of your computer:

    8. Palo Alto GlobalProtect icon

2 Setup VPN Portal Address

  1. You can invoke the GlobalProtect agent by clicking the GlobalProtect icon in the system tray.
  2. When the "Welcome!" menu appear, click "Get Started" to proceed.

    3. Welcome menu

  3. Enter the Portal Address "ivpn.cityu.edu.hk" in the address field and click "Connect".

    4. Portal Address

  4. Or click on the Settings menu, edit edit or add add portal address "ivpn.cityu.edu.hk" under Connections settings.

    5. Portal Address

    Connection Status

3. VPN Connection

  1. Navigate to system tray area and click on the GlobalProtect icon. Click "Connect" at the agent dialog box.

    2. GlobalProtect Not Connected GlobalProtect Address

  2. The system will redirect you to the CityU sign in page. Please enter your EID and password to sign in. You will see the agent dialog box shows "Connecting".

    3. GlobalProtect Not Connected

    GlobalProtect Connecting...

  3. Authentication will go through Okta process, same as step 3 under Section 1: VPN Client Agent Installation of this guideline.

  4. After successful login, the agent dialog box shows "Connected" and the GlobalProtect icon on the system tray will change from "GlobalProtect Not Connected" to "GlobalProtect Connected".

    5. GlobalProtect Connected GlobalProtect Connected

4. Frequently Asked Questions (FAQs)

Q1: When I login the VPN, the software prompt for update, what should I do??

Q2: My computer is running Microsoft Windows. Which one should I install among the "Windows 32-bit GlobalProtect agent" and "Windows 64-bit GlobalProtect agent"?

Q3: I cannot successfully re-install the new GlobalProtect agent because my computer has installed old GlobalProtect software. What should I do?

Q4: On Windows, the GlobalProtect software hanging and show connecting but not connected and could not manually refresh/disconnect the attempt.

Q1: When I login the VPN, the software prompt for update, what should I do?

A1: If you are using the agent with outdated version, the system will prompt for update as below screen.

    GlobalProtect Update

    Steps to udpate the agent:

    1. Click "Yes" when the system prompt for update, then wait for download.

    2. After the download completed, you will see below prompt and click "Yes" to install.

      3. GlobalProtect Update

    3. After the installation, system will start VPN connection and prompt for Okta authentication.

    4. Authentication will go through Okta process, same as step 3 under Section 1: VPN Client Agent Installation of this guideline.

Q2: My computer is running Microsoft Windows. Which one should I install among the "Windows 32-bit GlobalProtect agent" and "Windows 64-bit GlobalProtect agent"?

A2: Most modern PCs are pre-installed with 64-bit Windows operating system. If you want to confirm which version of Windows you are using, you may use the following steps:

  1. Click the Start button, then select Settings➔ System ➔ About;

  2. Locate your System type under "Device Specifications".

    3. System > About

Q3: I cannot successfully re-install the new GlobalProtect agent because my computer has installed old GlobalProtect software. What should I do?

A3: You should uninstall the old GlobalProtect agent before installing the new GlobalProtect agent.

Q4: On Windows, the GlobalProtect software hanging and show connecting but not connected and could not manually refresh/disconnect the attempt.

    Connecting...

A4: Open the "Task Manager" and kill the process "Global Protect client" via "End task", the Global Protect agent will re-run, and you can try to connect again.

    Task Manager...

 

IT.ServiceDesk@cityu.edu.hk