GlobalProtect
Download and Install the GlobalProtect App for Windows
Table of Contents
Download and Install the GlobalProtect App for Windows
Before connecting to the GlobalProtect network,
you must download and install the GlobalProtect app on your Windows
endpoint. To ensure that you get the right app for your organization’s
GlobalProtect or Prisma Access deployment, you must download the
app directly from a GlobalProtect portal within your organization.
For this reason, there is no direct GP app download link available
on the Palo Alto Networks site.
To download and install the
app, you must obtain the IP address or fully qualified domain name (FQDN)
of the GlobalProtect portal from the administrator. In addition,
your administrator should verify which username and password information
you can use to connect to the portal and gateways. In most instances,
the username and password, is the same username and password that
you use to connect to your corporate network. After you gather the
required information, use the following steps to download and install
the app:
To run GlobalProtect app 5.0 and above, Windows
endpoints require Visual C++ Redistributables 12.0.3 for Visual
Studio 2013. If you have not already installed any redistributable packages
on your endpoint, the GlobalProtect app installs Visual C++ Redistributables
12.0.3 automatically. If you have already installed Visual C++ Redistributables
12.0.2 or an earlier release, you must either uninstall the existing
redistributable packages from your endpoint or upgrade to Visual C++
Redistributables 12.0.3 prior to installing the GlobalProtect app.
- Log in to the GlobalProtect portal.
- Launch a web browser and go to the following URL:https://<portal IP address or FQDN>Example:http://gp.acme.com
- On the portal login page, enter yourName(username) andPassword, and then clickLOG IN. In most instances, you can use the same username and password that you use to connect to your corporate network.
- Navigate to the app download page.In most instances, the app download page appears immediately after you log in to the portal. Use this page to download the latest app software package.
If your system administrator has enabled GlobalProtect Clientless VPN access, the applications page opens after you log in to the portal (instead of the app download page). SelectGlobalProtect Agentto open the download page.
- Download the app.
- To begin the download, click the software link that corresponds to the operating system running on your computer. If you are not sure whether the operating system is 32-bit or 64-bit, ask your system administrator before you proceed.
- Open the software installation file.
- When prompted,Runthe software.
- When prompted again,Runthe GlobalProtect Setup Wizard.
- Complete the GlobalProtect app setup.
- In the GlobalProtect Setup Wizard, clickNext.
- ClickNextto accept the default installation folder (C:\Program Files\Palo Alto Networks\GlobalProtect) and then clickNexttwice.Although you canBrowseto select a different location in which to install the GlobalProtect app, the best practice is to install it in the default location. The default installation location is read-only for non-privileged users and therefore installing to this location protects against malicious access to the app.
- After installation is complete,Closethe wizard.
- Log in to GlobalProtect.
- Launch the GlobalProtect app by clicking the system tray icon. The status panel opens.
- Enter the FQDN or IP address of the portal that your GlobalProtect administrator provided, and then clickConnect.
- (Optional) By default, you are automatically connected to theBest Availablegateway, based on the configuration that the administrator defines and the response times of the available gateways. To connect to a different gateway, select the gateway from theGatewaydrop-down (for external gateways only).This option is only available if your administrator enables manual gateway selection.
- (Optional) Depending on the connection mode, clickConnectto initiate the connection.
- (Optional) If prompted, enter yourUsernameandPassword, and then clickSign In.If your administrator has allowed you to use biometric (fingerprint) information to sign in, you need to first sign-in with a username and password twice (once to save it and again to authenticate); you can then use biometric information to sign in.If authentication is successful, you are connected to your corporate network, and the status panel displays theConnectedorConnected - Internalstatus. If your administrator sets up a GlobalProtect welcome page, it displays after you log in successfully.