You are now in the main content area

RU-VPN2 - GlobalProtect Installation for Mac

Use RU-VPN2 for a secure connection to Ryerson's Administrative system via the Internet.  To use RU-VPN2, you will need to install and use client software called GlobalProtect which allows authorized users' access. It provides further security by creating a Virtual Private Network (VPN), which is like a “secure tunnel” through which all communication between the user PC and Ryerson must pass. All data transmissions are “encrypted” so that they cannot be read while travelling across the Internet.  GlobalProtect runs on your PC, laptop computer or mobile device, protecting you with the same security policies that protect the sensitive resources on Ryerson University network. 

Requirements

  • Access to the Internet
  • A valid my.ryerson username and password
  • VPN access enabled by the CCS Help Desk 
  • Two-Factor Authentication enabled for "applications that require two-factor authentication"

Note: If you do not meet or understand the above requirements, contact the CCS Help Desk for information before proceeding.  

Download, Install and use RU-VPN2:

Before you download and install RU-VPN2, you will need to request VPN access by visiting https://my.ryerson.ca, navigate to the Self Service in your Personal Account where you can manage your VPN access and requests.

To use RU-VPN2, you will need to setup two-factor authentication.  Please complete the  instructions outlined on the two-factor authentication page before proceeding with the download and install of RU-VPN2, GlobalProtect.

A Mac version of GlobalProtect is available for download, GlobalProtect.pkg.

To use RU-VPN2, you will need to install and use the GlobalProtect client software. This is the software included in the file you downloaded.

1. Before install, make sure that the GlobalProtect.pkg file is located on your Mac.

2. Click the GlobalProtect.pkg under 
Downloads and a Welcome to the Global Protect Installer screen will display.  Click Continue.

3. You may see the Select a Destination screen display.  Click Continue.

4. At the Custom Install on "Macintosh HD" screen, make sure GlobalProtect is checked. Click Continue.

5. A window will display specifying the space required. Click Install for a standard installation.

6. The installer will prompt for the administrator’s password to install the software. Please enter the password and click Install Software.

7. The software will install and a window saying "The installation was successful" will display.  Click Close.

1. After installation, GlobalProtect will open a Welcome to GlobalProtect window. Enter the portal address as  net.ryerson.ca  and click Connect.

2.  For the first time running "RU-VPN2", go to the Mac OS System Preferences then Security & Privacy. On the General tab click the allow button for "Palo Alto Networks", to allow the Mac OS to run the VPN software from now on.

3. At Ryerson Login screen enter your my.ryerson username and password. Click Log in.

4. Next you will be prompted for your Two-Factor Verification Code.  You can select the checkbox to trust this browser for 30 days, so that you will not be prompted during that time period.

Note: When GlobalProtect software is updating or if your PC is idle; GlobalProtect may need to reconnect and you may be prompted for the Verification Password again.

5. A Global Protect Connected window displays when connection is made.  You can now access sites that require VPN.

6. Once connected a detailed view is provided that includes the IP and statistics information which may differ from your instance:

7. When you are finished using GlobalProtect, click on the GlobalProtect icon found on your system tray.  Next click on the setting gear at the top right of the screen and select Disable. This will end your connection to VPN.

8. When you have the new RU-VPN2 up and running you should uninstall the RU-VPN, Tunnelblick.

Remove old RU-VPN2, GlobalProtect

If you are using an old version of GlobalProtect and need to uninstall it, you can do the following.

1. If the GlobalProtect.pkg file is located on your Mac you can use this to uninstall.  Click the GlobalProtect.pkg under Downloads and a Welcome to the Global Protect Installer screen will display.  Click Continue.

2. At the Custom Install on "Macintosh HD" screen, make sure Uninstall GlobalProtect is checked. Click Continue.

3. GlobalProtect will be removed from your system.

Remove old Open VPN, Tunnelblick

If you are still using the old Open VPN software, Tunnelblick, please complete these instructions.

To uninstall use a program such as AppCleaner to completely remove all files associated with Tunnelblick.  

  1. From the free Mac software, external link website, click on AppCleaner and download it.
  2. Run the AppCleaner application.
  3. Drag and drop Tunnelblick to this application.
  4. Check that Tunnelblick and all related files are selected. Click Delete to remove all the Tunnelblick files.

Connect and Disable VPN Access

1. Click the GlobalProtect icon in the system tray and then click Enable.

2. At Ryerson Login screen enter your my.ryerson username and password. Click Log in.

3. Next you will be prompted for your Two-Factor Verification Code.  You can select the checkbox to trust this browser for 30 days, so that you will not be prompted during that time period.

Note: When GlobalProtect software is updating or if your PC is idle; GlobalProtect may need to reconnect and you may be prompted for the Verification Password again.

4. A Global Protect Connected window displays when connection is made.  You can now access sites that require VPN.

When you are finished using GlobalProtect, click on the GlobalProtect icon found on your system tray.  Next click on the Setting gear at the top right of the screen and select Disable. This will end your connection to VPN.

FAQ

The VPN status icon, which displays on the system tray at the top of the screen, will indicate the current connection state:

  • GlobalProtect icon displays with an earth with a house image, when connected. GlobalProtect is connected successfully. This also displays when you connect your laptop from home or a Ryerson untrusted network like wireless networks.
  • GlobalProtect icon displays with an "x" when not connected. GlobalProtect is not connected, either because authentication failed or you chose to disable your connection.

Remove old RU-VPN2, GlobalProtect

If you are using an old version of GlobalProtect and need to uninstall it you can do the following.

1. If the GlobalProtect.pkg file is located on your Mac you can use this to uninstall.  Click the GlobalProtect.pkg under Downloads and a Welcome to the Global Protect Installer screen will display.  Click Continue.

2. At the Custom Install on "Macintosh HD" screen, make sure Uninstall GlobalProtect is checked. Click Continue.

3. GlobalProtect will be removed from your system.

Remove old Open VPN, Tunnelblick

If you are still using the old Open VPN software, Tunnelblick, please complete these instructions.

To uninstall use a program such as AppCleaner to completely remove all files associated with Tunnelblick.  

  1. From the free Mac software, external link website, click on AppCleaner and download it.
  2. Run the AppCleaner application.
  3. Drag and drop Tunnelblick to this application.
  4. Check that Tunnelblick and all related files are selected. Click Delete to remove all the Tunnelblick files.

If your Mac is a Ryerson computer and supported by CCS, please contact the CCS Help Desk at help@ryerson.ca or extension 556806; otherwise, contact the person who has administrator rights on the computer.

This may be caused by entering an incorrect or invalid my.ryerson username, password or verification code. Make sure you are entering your my.ryerson username and password. Remember that usernames and passwords are case-sensitive.  If you are able to log on http://my.ryerson.ca using your my.ryeson user name and password, the problem may be your two-factor authentication setup. Try resetting your two-factor authentication by revoking your two-factor authentication and then reactivating two-factor authentication.

Follow the Disable GlobalProtect instructions.

If you are connecting from an Administrative network, not Academic or from off campus or RU-Secure, and require full VPN to access your application, please do the following:

1. Click on the GlobalProtect icon found on your system tray.  Next click on the Gateway dropdown selection and choose Ryerson.  You will now have full VPN access.
Internal connection, need full VPN, click on GlobalProtect icon, at the bottom of screen select "Ryerson"

2.  When you no longer need access to your application that required full VPN, you can disconnect.  Click on the GlobalProtect icon found on your system tray.  Next click on the Gateway dropdown selection and choose Best Available.

Internal connection, disconnect full VPN, click on GlobalProtect icon, at the bottom of screen select "Best Available"

Click the GlobalProtect icon from the system tray.  Click the Setting gear at the top right and select About. This will display the version of GlobalProtect that you are using.

Click the GlobalProtect icon, then click the Settings gear at the top right and select About to display the version of GlobalProtect.

Version of GlobalProtect is displayed

GlobalProtect is pre-set to check if there are new versions available.  Once you have installed GlobalProtect and establish a VPN connection, the software will download the new version and put it in a queue.  It will install by itself.  You may see a message "GlobalProtect agent upgrade is in progress.  Please wait, application will restart once the upgrade is complete."

If the information here did not help to resolve your problem, you can contact the CCS Help Desk at help@ryerson.ca.  Please include details of:

  • Your operating system version, e.g. Windows 7 Professional with SP1, Mac OS X 10.10.2 etc.  Your GlobalProtect Client version  
  • Your ISP (Internet Service Provider)
  • Your Ryerson email address

Important Note 

Ryerson is taking the issue of security very seriously. It is imperative that you disconnect your VPN session when you are finish with accessing any of the Ryerson systems or when your computer will be left unattended and unsecured for some period of time during the day.

Leaving your active VPN session open and unattended provides others with the opportunity for message forgery and other misuse, attributing them to you and creating an embarrassment to you and possibly compromising the integrity of Ryerson. This is especially important for people who share computers or have their computer located in a public area.

Some basic safeguards which can be used to aid data security are:

  • Disconnect your VPN session and logout from your PC during periods of absence. (e.g. coffee break, lunch, meetings etc.)
  • Lock your office or room during periods of absence during normal working hours.
  • Always use a screen saver password and a computer power-on password.