Search
Search filters applied
UNM VPN Service
Answer ID 7819 |
Published 03/13/2020 09:54 AM |
Updated 05/13/2024 08:58 AM
How do I get VPN?
What is the GlobalProtect (Palo Alto) VPN and how do I Install the Client on my Computer?
Business customers who have a need to access sensitive and protected information remotely may need to use a VPN, which makes your computer appear as if you were on UNM’s Albuquerque campus. UNM IT offers GlobalProtect (Palo Alto) as a VPN solution for these users.
Medical systems housed by HSC and UH will require the Cisco VPN for offsite access. For assistance with the Cisco VPN, please contact the HSC Service Desk at (505) 272-1694.
All users with an active individual NetID are granted basic access by default, therefore, requesting access separately is not required. GlobalProtect requires authentication through Azure MFA. If more advanced VPN access is needed for specific applications or access to share drives, please submit a Service Request at Help.UNM.edu, specifying which applications or VPN group being requested.
When using VPN, please follow the UNM Departmental Computer Use Policies and Procedures
The website https://unmvpn.unm.edu will provide the VPN access in two ways:
- The GlobalProtect VPN desktop client can be downloaded to a UNM-owned device.
- This method should be used for accessing applications from your desktop or to access shared drives. All network traffic from your computer will be funneled through the VPN IP address.
- For web applications requiring a VPN connection (MyReports, Pinnacle, BAR, etc.), you have the option to a bypass the requirement to install the client by using the SSL VPN portal.
- This method does not require the GlobalProtect client to be installed, however; usage will be limited to web based application access only.
Both options require authentication through Azure MFA
- If you experience issues, or otherwise need assistance, with Azure MFA, see What is Azure multi factor authentication (MFA) and how does it work at UNM?.
Using the GlobalProtect client will provide the most seamless VPN experience. There is no need to use the SSL VPN portal, in addition to the GlobalProtect client, as all computer traffic will be routed through the VPN’s IP address, including web applications.
Installation of the GlobalProtect VPN Client
In many cases, the installation of the GlobalProtect VPN client will be handled by your department’s desktop support group, although the option is available to download the application directly from https://unmvpn.unm.edu (preferred) or UNM IT’s software download page at http://it.unm.edu/download/. The GlobalProtect client is intended for use on UNM-owned devices.
- Visit https://unmvpn.unm.edu in your web browser and sign in with your NetID in full LoboMail email format, even if you don’t have one (ie. NetID@unm.edu NOT just the NetID).
- GlobalProtect requires authentication through Azure MFA and you will need to approve access on your previously selected device.
- If you experience issues, or otherwise need assistance, with Azure MFA, see What is Azure multi factor authentication (MFA) and how does it work at UNM?.
- If you have already authenticated through Azure MFA on your device, (ex. signed into LoboMail), you will not be prompted to authenticate again.
- GlobalProtect requires authentication through Azure MFA and you will need to approve access on your previously selected device.
- On the top right corner, select GlobalProtect Agent.
- The next page will display three links to download the client. Select the version that applies to your computer operating system and configuration.
- Download Windows 32 bit GlobalProtect agent
- Download Windows 64 bit GlobalProtect agent
- Download Mac 32/64 bit GlobalProtect agent
- Follow the steps to install, as prompted by your computer.
- NOTE: If you are prompted with a message asking to sign in with additional Administrator credentials, please contact your Information Technology Officer (ITO) or local IT unit for further assistance. If you are unsure who that is, visit Help.UNM.edu and submit a Service Request for assistance.
- Once installed, GlobalProtect will prompt you for the portal address. Enter unmvpn.unm.edu in the field.
- (macOS) – For GlobalProtect to work correctly on macOS, you will be required to enable the Palo Alto Networks extension.
- Select “Open Security Preferences” when prompted
- Select "Security & Privacy"
- Navigate to the "General" tab
- Select "Allow" next to "System software from developer 'Palo Alto Networks' was blocked from loading"
- (macOS) – For GlobalProtect to work correctly on macOS, you will be required to enable the Palo Alto Networks extension.
- Enter your NetID@unm.edu and password to complete the login process.
Be aware that as long as you are connected to the VPN, all of your traffic will come through the UNM network. Please keep this in mind if you are concerned about web security. Be sure to sign off the VPN when it is not necessary by finding the GlobalProtect icon either in the bottom next to the clock, on the taskbar, or by the clock on the top right if you are on macOS. You can click that icon, then “Disable” when you have completed University business requiring the VPN connection.
Using the SSL VPN Portal for Connecting to a Website without Installing the GlobalProtect VPN Client
- Visit https://unmvpn.unm.edu in your web browser and sign in and sign in with your NetID in full LoboMail email format, even if they don’t have one (ie. NetID@unm.edu NOT just the NetID).
- GlobalProtect requires authentication through Azure MFA and you will need to approve access on your previously selected device.
- If you experience issues, or otherwise need assistance, with Azure MFA, see What is Azure multi factor authentication (MFA) and how does it work at UNM?.
- If you have already authenticated through Azure MFA on your device, (ex. signed into LoboMail), you will not be prompted to authenticate again.
- GlobalProtect requires authentication through Azure MFA and you will need to approve access on your previously selected device.
- Once signed in, you will be presented with several tiles for web applications VPN is required to access.
- If the web application you wish to access is listed as a tile.
- Simply click the tile to access the site and use as normal.
- If the web application you wish to access is NOT listed as a tile.
- Navigate to the “Go to URL” chevron (top right toolbar).
- Select the chevron to open the URL address input field.
- Enter the address of the web application (ex. pinnacle.unm.edu - without “https://” or “www”) and select “Go”.
- You will be taken to the site through the SSL VPN IP address.
- If the web application you wish to access is listed as a tile.
The URL in the address bar will display the address of the web application you’re are accessing, preceded by "https://unmvpn.unm.edu/https/". This indicates the web application has established a secure connection to the UNM network via the SSL VPN.
For further assistance, please submit a Help.UNM ticket or contact UNM Information Technologies Customer Support Services (IT CSS) by calling (505) 277-5757.
Was this answer helpful?
Your rating has been submitted, please tell us how we can make this answer more useful.