Download and Install the GlobalProtect App for Windows
Before connecting to the GlobalProtect network,
you must download and install the GlobalProtect app on your Windows
endpoint. To ensure that you get the right app for your organization’s
GlobalProtect or Prisma Access deployment, you must download the
app directly from a GlobalProtect portal within your organization.
For this reason, there is no direct GP app download link available
on the Palo Alto Networks site.
To download and install the
app, you must obtain the IP address or fully qualified domain name (FQDN)
of the GlobalProtect portal from the administrator. In addition,
your administrator should verify which username and password information
you can use to connect to the portal and gateways. In most instances,
the username and password, is the same username and password that
you use to connect to your corporate network. After you gather the
required information, use the following steps to download and install
To run GlobalProtect app 5.0 and above, Windows
endpoints require Visual C++ Redistributables 12.0.3 for Visual
Studio 2013. If you have not already installed any redistributable packages
on your endpoint, the GlobalProtect app installs Visual C++ Redistributables
12.0.3 automatically. If you have already installed Visual C++ Redistributables
12.0.2 or an earlier release, you must either uninstall the existing
redistributable packages from your endpoint or upgrade to Visual C++
Redistributables 12.0.3 prior to installing the GlobalProtect app.
Log in to the GlobalProtect portal.
Launch a web browser and go to the following
https://<portal IP address or FQDN>
On the portal login page, enter your
and then click
. In most instances,
you can use the same username and password that you use to connect
to your corporate network.
Navigate to the app download page.
In most instances, the app download page appears immediately
after you log in to the portal. Use this page to download the latest
app software package.
system administrator has enabled GlobalProtect Clientless VPN access,
the applications page opens after you log in to the portal (instead
of the app download page). Select
open the download page.
Download the app.
To begin the download, click the software
link that corresponds to the operating system running on your computer.
If you are not sure whether the operating system is 32-bit or 64-bit,
ask your system administrator before you proceed.
Open the software installation file.
When prompted again,
GlobalProtect Setup Wizard.
Complete the GlobalProtect app setup.
In the GlobalProtect Setup Wizard, click
to accept the default
installation folder (C:\Program Files\Palo Alto Networks\GlobalProtect)
and then click
Although you can
select a different location in which to install the GlobalProtect
app, the best practice is to install it in the default location.
The default installation location is read-only for non-privileged
users and therefore installing to this location protects against
malicious access to the app.
After installation is complete,
Log in to GlobalProtect.
Launch the GlobalProtect app by clicking
the system tray icon. The status panel opens.
Enter the FQDN or IP address of the portal that your
GlobalProtect administrator provided, and then click
) By default, you are automatically
connected to the
based on the configuration that the administrator defines and the
response times of the available gateways. To connect to a different
gateway, select the gateway from the
(for external gateways only).
This option is only available if your administrator
enables manual gateway selection.
) Depending on the connection mode,
to initiate the connection.
) If prompted, enter your
and then click
If your administrator has allowed you to use biometric
(fingerprint) information to sign in, you need to first sign-in
with a username and password twice (once to save it and again to authenticate);
you can then use biometric information to sign in.
is successful, you are connected to your corporate network, and
the status panel displays the
status. If your administrator sets up a GlobalProtect
welcome page, it displays after you log in successfully.