VPN connection to UK Campus Resources
Info: Users (both UKy students/staff and external) need to have activated their linkblue accounts. See Activating your linkblue (specifically the FAQ page) for more information.
Attention
Before you follow the instructions on this page, you first request VPN access. Instructions are available at the following page: How do I request main campus VPN access?
After you are granted access to the VPN service you can continue with this document.
If you have any issues with the VPN client, please contact campus IT by submitting a ticket, as described in the following guide: Where can I get tech help?. If your VPN connection works but you are unable to log in to LCC/MCC, submit a support ticket at the following page: UKY HPC Help Center.
This document will describe how to connect to the campus Virtual Private Network (VPN) service with a VPN client. It describes instructions for Mac, Windows and Linux OS.
Requirements
To access remote services over a Palo Alto GlobalProtect client session, your system must have the following setup:
The client application must be installed locally on your system.
The operating system must be Microsoft Windows 7/8/8.1/10, Linux (RHEL/Centos 7.0 & up, Ubuntu 14.04 & up, ), or Mac OS X 10.10 & up
Download Palo Alto GlobalProtect client
The client is available from the UK VPN website.
Mac or Windows OS users:
From your browser, go to https://ra.uky.edu (Login using your linkblue credentials)
Select the appropriate download for your OS.
Linux OS users:
From your browser, go to the UK Software Downloads page and login using your linkblue credentials
Select “Enterprise” from the “Software Categories” and select “See Downloads” in the “Palo Alto GlobalProtect” section.
Select the “Download” button within the Global Protect (Linux) section (You may have to click on another download button on a new page). You can also optionally view the “Install Guide”.
Windows OS Users Guide:
When the download is complete:
Double click on the executable file and click "Next"
Click "Next" to confirm the location of the installation.
Click "Next" to confirm the installation.
Click "Close" when the installation is successfully finished.
If you do not see the following welcome screen, look in your system tray and click the globe icon.
Once the "GlobalProtect" portal is open, enter the address: ra.uky.edu
Then, click the "Connect" button.
After this, it will open up "GlobalProtect" Login window, Sign in using your linkblue credentials.
The login screen will indicate you are connected to the VPN.
To end your session, click "Disconnect"
Mac OS Users Guide:
When the download is complete, click "GlobalProtect.pkg" to start the installation.
From the “Introduction” page click "Continue"
From the “Destination Select” page click "Continue"
From the “Installation Type” page click "Continue"
Enter your computer's password if prompted to install the software.
Click "Install Software"
Now, enter the portal address: ra.uky.edu
If you don't see the sign-in box, click on the globe icon from the menu bar.
Then, click "Connect"
Note: If it hangs here ("Waiting...") or you see error "some components of the GlobalProtect app could not be launched" please follow these instructions or else, skip to sign in step.
(Credit: Following solution has been taken from ITS)
If you are running on macOS, version 10.13 or later you may encounter this error message when attempting to connect to your VPN gateway:
or, you might encounter the "Connecting...." status notice running indefinitely; not establishing a connection. These issues might occur due to new security measures by Apple.
In addition to the message and dialog above, you will see this message.
Perform these steps to prevent the message from displaying:
1. From your Mac, launch "System Preferences"
2. Click Security & Privacy preferences.
3. Click the "General" tab (A).
4. Click the lock icon (B) on the bottom left of the window to make changes and modify preferences.
5. When prompted, enter your Mac Admin account credentials (Not Linkblue)
6. After putting in your ‘User Name’ and ‘Password Click’, click Unlock.
7. Click Allow.
After this, it will open up "GlobalProtect" Login window, Sign in using your linkblue credentials.
The login screen will indicate you are connected to the VPN.
To end your session, click on the globe icon on the top menu bar and click "Disconnect"
Linux OS Users Guide:
Once the download is finished. Go to the directory path where .tgz file is downloaded.
Extract the files from the package using the following command (replace <file_name> with the name of the file you downloaded :
$ tar -xvf <file_name>.tgz Here is an example extraction, note that the version and filename for yours might be different
$ tar -xvf PanGPLinux-6.1.5-c3.tgz
./
./GlobalProtect_deb-6.1.5.1-715.deb
./GlobalProtect_deb_arm-6.1.5.1-715.deb
./GlobalProtect_focal_deb-6.1.5.1-715.deb
./GlobalProtect_focal_deb_arm-6.1.5.1-715.deb
./GlobalProtect_focal_rpm-6.1.5.0-863.rpm
./GlobalProtect_focal_rpm_arm-6.1.5.0-863.rpm
./GlobalProtect_focal_tar-6.1.5.1-715.tgz
./GlobalProtect_focal_tar_arm-6.1.5.1-715.tgz
./GlobalProtect_rpm-6.1.5.0-863.rpm
./GlobalProtect_rpm_arm-6.1.5.0-863.rpm
./GlobalProtect_tar-6.1.5.1-715.tgz
./GlobalProtect_tar_arm-6.1.5.1-715.tgz
./GlobalProtect_UI_deb-6.1.5.1-715.deb
./GlobalProtect_UI_focal_deb-6.1.5.1-715.deb
./GlobalProtect_UI_focal_rpm-6.1.5.0-863.rpm
./GlobalProtect_UI_focal_tar-6.1.5.1-715.tgz
./GlobalProtect_UI_rpm-6.1.5.0-863.rpm
./GlobalProtect_UI_tar-6.1.5.1-715.tgz
./gp_install.sh
./gp_uninstall.sh
./manifest
./relinfYou will see multiple installation packages for supported operating system versions
.deb for Debian and Ubuntu
.rpm for Centos and Red Hat
NOTE: Make sure to pick GlobalProtect_UI prefix is the package for the GUI version.
Now, use the appropriate installation command on an appropriate file based on the system you are installing on.
Below is an example for .deb (Debian based version)
Linux GUI Installation:
sudo dpkg -i GlobalProtect_UI_deb-5.1.0.0-101.debOnce the installation is complete, GlobalProtect (a globe icon) will appear in your menu bar at the top of your Linux desktop.
If it does not appear, you can get the interface to appear by entering
globalprotect launch-uiOnce you are able to see the globe icon on the top of the desktop, click to open it. Add ra.uky.edu to into the portal address field and click “Connect”.
After this, it will open up "GlobalProtect" Login window, Sign in using your linkblue credentials.
The login screen will indicate you are connected to the VPN.
To end your session, click on the globe icon on the top menu bar and click "Disconnect"
Linux CLI Installation:
CLI mode installations of GlobalProtect do not support Two-Factor Authentication yet. GUI installation will be required to successfully connect.