Using GlobalProtect VPN for Remote Access

Palo Alto GlobalProtect VPN uses an agent on your computer or device for secure, remote connections to your college or CUNY network.

Open the GlobalProtect agent application on your computer or device.
The GlobalProtect Portal window is displayed. Configure the VPN Client (PaloAlto GlobalProtect) on your device and click Connect.
The CUNY Login page is displayed.
Enter your CUNY Login username and password, then click Log In.
- If you have not yet enabled MFA for remote access, an error message is displayed. Close the browser and follow the instructions in Setting Up CUNY Login MFA before attempting remote access again.
- If you have already set up CUNY Login MFA, a window is displayed prompting you to choose your MFA login method from the displayed list of Mobile Authenticator devices.
- If you are also prompted to share your location with ssologin.cuny.edu, click Allow.
  Notes:
- If you do not see a window prompting you to choose your MFA login method, your CUNY Login MFA setup may be incomplete. Clear the browser cache, close the browser window, and then follow the instructions in Setting Up CUNY Login MFA and Responding to MFA Requests before attempting remote access again.
- DO NOT choose to Remember Choice. This will set the displayed method as the default which causes issues when only a single TOTP method has been configured.
Click on the Enter OTP from device link corresponding to the friendly name you set up for CUNY Login MFA.
A window is displayed prompting you to enter the one-time password (OTP) from your mobile phone.
Open the Microsoft Authenticator app on your mobile phone to display the one-time password code.
Make sure to open the account you set up for use with CUNY Login MFA.
In the Enter OTP from the registered phone field, enter the one-time password code and click Verify. Do not enter spaces.
A New Tab will open in your browser. Click "Open GlobalProtect" in the popup browser tab. Important Note: You must click this popup prompt twice. The second prompt will appear a few seconds after the first, in a new tab.

Important Note: You may need to wait a couple seconds for a successful connection after clicking on the second "Open GlobalProtect" prompt.
The GlobalProtect Agent shows connected and you now have secure access to your college or CUNY network and associated computer applications and services.
Begin your remote connection.

When you are finished working remotely, log out from your college or CUNY network and associated computer applications and services, then click Disconnect in the GlobalProtect Agent application.