What is GlobalProtect VPN?
VPN stands for Virtual Private Network. It extends a private network (like BCIT’s campus network) across a public network (like the internet), allowing secure access from remote locations such as your home, a café, or other Wi-Fi networks. A VPN improves authentication and security for off-campus connections.
BCIT uses GlobalProtect VPN as its official VPN solution.
GlobalProtect VPN is the only supported method for students, staff, and faculty to securely access BCIT’s network from off-campus. It provides access to shared resources such as printers and network drives. Employees can also use it to access business applications like Banner and Cognos. Network performance may vary depending on your internet connection.
This article provides general instructions for installing and using GlobalProtect VPN. Due to the variety of devices and operating systems, not all scenarios are covered. Instructions focus on common North American versions of Windows 11 and macOS. While GlobalProtect version numbers may differ, the setup process remains mostly the same.
Note on Supported Operating Systems and Platforms: Although GlobalProtect is available for iOS, Android, Linux, and ChromeOS, BCIT does not support these platforms. Connections from these systems will not work with BCIT’s GlobalProtect VPN.
GlobalProtect Application Updates: If you see a prompt to update GlobalProtect, it means BCIT ITS has tested and approved a new version released by Palo Alto. Update the application when possible.
Students - Choose the instructions for your device:
Manually Installing GlobalProtect VPN on Windows (Students)
Manually Installing GlobalProtect VPN on Windows OS
1. Using your preferred web browser, download and extract .zip file:
Windows(64-bit)
- Note 64-bit is the most common, including all modern BCIT issued Laptops
- This zip file contains both the “standard’ Windows .msi installer and the Windows ARM64 .msi installer.
2. Extract and Run the .msi file to begin the installation.
- For x86 (Intel/AMD) Windows devices, extract and run the .msi file labelled ‘GlobalProtect64Standard.msi”
- For ARM64 Windows devices, extract and run the .msi file labelled “GlobalProtectARM64.msi”
3. Click Next to begin the installation of the GlobalProtect Application.
4. Click Next on the “Installation Folder” page.
5. Click Next on the “Confirm Installation” page.
6. When the User Account Control (UAC) installation prompt appears, click Yes.
7. Click Close on the "Installations Complete" page.
8. When the application is installed, click on the grey/white GlobalProtect Icon in the system tray.
9. In the GlobalProtect popup, type gpconnect.bcit.ca and click Connect.
10. A new web browser window will open. Enter your primary BCIT email address and password, and have your multi-factor authentication (MFA) ready..
- Note: Occasionally, the VPN client minimizes to the system tray before you can connect. Look in the system tray if you can’t find the VPN client.
- If you have already logged into another BCIT System requiring MFA on the same computer, you may not be prompted for MFA.
11. After successful login, a Palo Alto Networks webpage will appear prompting you to open GlobalProtect. Click Open Link in the prompt.
- Note: Depending on the configuration of your device, this popup might be blocked by the browser – check to see if there are any pop-up blocker notifications to allow this popup.
- If you have previously clicked the “Always Allow” button, this prompt will not appear on that specific computer.
12. The popup will close, and the GlobalProtect application will change from ‘Connecting’ to ‘Connected.’ If you are off campus, it will display ‘GP_External_Gateway’ once connected. GlobalProtect VPN is now ready to use, and you may close the webpage.
- Note: If you are using GlobalProtect VPN while on campus, the text ‘GP_Internal_Gateway’ will be displayed.
13. When you’re ready to disconnect, click on the GlobalProtect icon in system tray and click the three lines in the top right hand corner of the application.
14. A small drop-down menu will appear. From this menu, click Disconnect.
15. GlobalProtect is now disconnected. To reconnect, click the Connect button.
Manually Installing GlobalProtect VPN on Apple MacOS (Students)
Manually Installing GlobalProtect VPN on Apple MacOS
1. Using your preferred web browser, download and extract the .pkg installation file:
Apple MacOS (Intel/Apple Silicon)
2. Run the file to begin the installation.
3. Click Continue to begin the installation of the GlobalProtect Application.
4. Click Continue on the “Installation Type” page.
5. Click Install on the “Standard Installation” page.
6. Click Yes/Proceed/Install on the Application installation prompt that appears.
7. Click Close on the “Installation Complete” page.
8. Click Move to Trash on the prompt.
9. When the application is installed, click on the grey/white GlobalProtect Icon in the system tray.
10. In the GlobalProtect popup, click Get Started and type gpconnect.bcit.ca, and then click Connect.
11. A new web browser window will open. Enter your primary BCIT email address and password, and have your multi-factor authentication (MFA) ready.
- Note: Occasionally, the VPN client minimizes to the system tray before you can connect. Look in the system tray if you can’t find the VPN client.
- If you have already logged into another BCIT System requiring MFA on the same computer, you may not be prompted for MFA.
12. After successful login, a Palo Alto Networks webpage will appear prompting you to open GlobalProtect. Click Open Link in the prompt.
- Note: Depending on the configuration of your device, this popup might be blocked by the browser – check to see if there are any pop-up blocker notifications to allow this popup.
- If you have previously clicked the “Always Allow” button, this prompt will not appear on that specific computer.
13. The popup will close, and the GlobalProtect application will change from ‘Connecting’ to ‘Connected’ If you are off campus, it will display ‘GP_External_Gateway’ once connected. GlobalProtect VPN is now ready to use, and you may close the webpage..
- Note: If you are using GlobalProtect VPN while on campus, the text ‘GP_Internal_Gateway’ will be displayed.
14. When you’re ready to disconnect, click on the GlobalProtect icon in system tray and click the three lines in the top right hand corner of the application.
15. A small drop-down menu will appear. From this menu, click Disconnect.
16. GlobalProtect is now disconnected. To reconnect, click the Connect button.
Faculty and Staff - Choose the instructions for your device:
Installing GlobalProtect VPN From Company Portal on BCIT Issued Windows Devices (Employees)
GlobalProtect VPN is automatically installed on BCIT-managed Windows devices. If it isn’t pre-installed, follow the steps below to install it via the Company Portal.
For BCIT issued Windows laptops, Company Portal is the latest application that enables staff to securely download and install various BCIT applications as well as Windows updates. For more information on using the Company Portal please refer to the Using Company Portal article.
Installing GlobalProtect from the Company Portal
Company Portal is pre-installed on all BCIT-issued computers.
- In the Search bar on the bottom of your screen, type "Company Portal" and hit Enter.
- The Company Portal will open and display its homepage.
- In the Company Portal Search bar, type GlobalProtect and click on the GlobalProtect application.
- Click the Install button.
- Once GlobalProtect is installed, return to the Windows Search bar, type GlobalProtect and hit Enter.
- When GlobalProtect launches, enter gpconnect.bcit.ca in the portal window. Click Connect.
- A new browser window will open. Enter your primary BCIT email address and password, and ensure your multi-factor authentication (MFA) method is ready.
- Note: Occasionally, the VPN client minimizes to the system tray before you can connect. Look in the system tray if you can’t find the VPN client.
- If you have already logged into another BCIT System requiring MFA on the same computer, you may not be prompted for MFA.
- After successfully logging in, a Palo Alto Networks page will appear, prompting you to open GlobalProtect. Click Open Link when prompted..
- Note: Depending on the configuration of your device, this popup might be blocked by the browser – check to see if there are any pop-up blocker notifications to allow this popup.
- If you have previously clicked the “Always Allow” button, this prompt will not appear on that specific computer.
- The pop-up will close, and the GlobalProtect application will change from ‘Connecting‘ to ‘Connected.’ If you’re off campus, it will display ‘GP_External_Gateway‘ once the connection is successful. GlobalProtect VPN is now ready to use, and you may close the browser window.
- Note: If you’re using GlobalProtect VPN while on campus, the message ‘You are on the internal corporate network‘ will be displayed.
- Note: If you’re using GlobalProtect VPN while on campus, the message ‘You are on the internal corporate network‘ will be displayed.
- When you’re ready to disconnect, click on the GlobalProtect icon in system tray and click the three lines in the top right hand corner of the application.
- A small dropdown menu will appear; from this menu, select Disconnect.
- GlobalProtect is now disconnected. To reconnect, click the Connect button.
Installing GlobalProtect VPN From Self Service on BCIT Issued Apple MacOSDevices (Employees)
GlobalProtect VPN is automatically installed on BCIT-managed Apple MacOS devices. If it isn’t pre-installed, follow the steps below to install it using Self Service.
For BCIT issued Apple MacOS Macbooks, Self Service is the latest application that enables staff to securely download and install various BCIT applications. For more information on using Self Service please refer to the Self Service article.
Installing GlobalProtect VPN from Self Service
Self Service is pre-installed on all BCIT-issued computers.
- To open it, go to the Launchpad from your desktop and type ‘BCIT Self Service’ in the search bar at the bottom of the screen. Then, click the BCIT logo icon to launch the app.
- The Self Service app will launch and display its homepage.
- In the Self Service Search bar, type GlobalProtect and click on the GlobalProtect application.
- Click the Install button.
- After GlobalProtect is installed, return to the Launchpad, type ‘GlobalProtect‘ in the search bar, and click the GlobalProtect application to open it.
- When GlobalProtect launches, enter gpconnect.bcit.ca in the portal window. Click Connect.
- A new browser window will open. Enter your primary BCIT email address and password, and ensure your multi-factor authentication (MFA) is ready.
- Note: Occasionally, the VPN client minimizes to the system tray before you can connect. Look in the system tray if you can’t find the VPN client.
- If you have already logged into another BCIT System requiring MFA on the same computer, you may not be prompted for MFA.
- After successful login, a Palo Alto Networks webpage will appear prompting you to open GlobalProtect. Click Open Link in the prompt.
- Note: Depending on the configuration of your device, this popup might be blocked by the browser – check to see if there are any pop-up blocker notifications to allow this popup.
- If you have previously clicked the “Always Allow” button, this prompt will not appear on that specific computer.
- The pop-up will close, and the GlobalProtect application will change from ‘Connecting’ to ‘Connected’ If you are off campus, it will display ‘GP_External_Gateway’ once connected. GlobalProtect VPN is now ready to use, and you may close the webpage..
- Note: If you are using GlobalProtect VPN while on campus, the message ‘You are on the internal corporate network’ will be displayed.
- Note: If you are using GlobalProtect VPN while on campus, the message ‘You are on the internal corporate network’ will be displayed.
- When you’re ready to disconnect, click on the GlobalProtect icon in system tray and click the three lines in the top right hand corner of the application.
- A small drop-down menu will appear; from this menu, click Disconnect.
- GlobalProtect is now disconnected. To reconnect, click the Connect button