GlobalProtect VPN Setup Guide

Introducing GlobalProtect VPN 

GlobalProtect is a secure VPN solution that will be replacing the Ivanti VPN client. Unlike Ivanti, the level of access you recieve to the VPN will depend on the type of device you are connecting with. 

  • Trusted Devices: If your device is issued by PMACS or UPHS, it is considered trusted. You’ll receive full VPN access, matching what you previously had through Ivanti.
  • Untrusted Devices: Any device not managed by PMACS or UPHS, including personal devices and devices issued by other organizations such as CHOP and other Penn Schools, will receive limited access by default.

VPN Exception Process for personal and non-PMACS/UPHS devices

If you’re using a personal or non-PMACS/UPHS managed device and need access to specific PMACS resources, you’ll need to submit a VPN exception request.

You must request an exception if you need access to:

  • Remote access to a PMACS desktop
  • PMACS Shared Drives
  • SSH access to PMACS Linux servers (except LPC & HPC submit hosts)

You do NOT need an exception to access:

  • LPC & HPC submit hosts
  • LIMS
  • Velos
  • Other PMACS web-based tools

Any access granted through the VPN exception process will last for 1 year. If continued access is needed after 1 year, you will need to resubmit the exception form at that time.

To get started, choose the appropriate option below based on your device and access needs.

Click the above dropdown if you are using a PMACS or UPHS managed Windows PC

GlobalProtect is pre-installed on all PMACS-managed Windows computers.
If you are unable to locate the GlobalProtect client or need to reinstall it, you can find the installer at https://psomvpn.uphs.upenn.edu/ (Login with PMACS credentials and select Windows 64 bit client) 

  1. Launch GlobalProtect.
  2. In the Portal Address field, enter: psomvpn.uphs.upenn.edu
  3. Click Connect and log in with your PMACS credentials
  4. When prompted for "Verification Code", authenticate using DUO:
    • Type push for push notification (recommended)
    • Type phone for phone call
    • Type sms for text message
    • Or open the DUO app and enter the 6-digit code under your University of Pennsylvania profile

 

Click the above dropdown if you are using a PMACS or UPHS managed Mac 

GlobalProtect is pre-installed on all PMACS-managed Mac computers.
If you are unable to locate the GlobalProtect client or need to reinstall it, you can find the installer in the PMACS Self Service app on your Mac:
Finder > Applications > PMACS Self Service

  1. Launch GlobalProtect (click the globe icon in the top-right menu bar)   GlobalProtect Mac Icon
  2. In the Portal Address field, enter: psomvpn.uphs.upenn.edu
  3. Click Connect and log in with your PMACS credentials
  4. When prompted for "Verification Code", authenticate using DUO:
    • Type push for push notification (recommended)
    • Type phone for phone call
    • Type sms for text message
    • Or open the DUO app and enter the 6-digit code under your University of Pennsylvania profile

 

Click the above dropdown if you need to connect to the VPN from any Windows device not managed by PMACS or UPHS

VPN Access for Unmanaged Devices

Unmanaged devices have limited access to the PMACS VPN by default. If you need access to any of the following services, you must first submit the VPN Exception Form:

  • Remote Desktop (RDP) access to a PMACS Windows device
  • PMACS Fileshares (shared drive via SMB)
  • SSH access to PMACS servers (excluding LPC and HPC submit hosts)

Click Here to access the VPN exception form.

Device Requirements

To be eligible for the VPN exception, you must affirm your device meets the following criteria:

  • Operating system is updated to the latest version
  • Antivirus/anti-malware software is installed
  • Antivirus/anti-malware software is updated to the latest version

Access granted through the VPN exception process expires after one year. If continued access is needed, you must re-submit the exception form.

Installation and Configuration (Windows)

  1. Go to https://psomvpn.uphs.upenn.edu
  2. Log in using your PMACS credentials and complete DUO two-factor authentication (type push, sms, or phone)
  3. Download and install the Windows 32 bit or 64 bit version of GlobalProtect (depending on your OS). 
  4. Launch GlobalProtect
  5. In the Portal Address field, enter: psomvpn.uphs.upenn.edu
  6. Click Connect and log in with your PMACS credentials
  7. When prompted for "Verification Code", authenticate using DUO:
    • Type push for push notification (recommended)
    • Type phone for phone call
    • Type sms for text message
    • Or open the DUO app and enter the 6-digit code under your University of Pennsylvania profile

Click the above dropdown if you need to connect to the VPN from any MacOS device not managed by PMACS or UPHS

VPN Access for Unmanaged Devices

Unmanaged devices have limited access to the PMACS VPN by default. If you need access to any of the following services, you must first submit the VPN Exception Form:

  • Remote Desktop (RDP) access to a PMACS Windows device
  • PMACS Fileshares (shared drive via SMB)
  • SSH access to PMACS servers (excluding LPC and HPC submit hosts)

Click Here to access the VPN exception form.

Device Requirements

To be eligible for the VPN exception, you must affirm your device meets the following criteria:

  • Operating system is updated to the latest version
  • Antivirus/anti-malware software is installed
  • Antivirus/anti-malware software is updated to the latest version

Access granted through the VPN exception process expires after one year. If continued access is needed, you must re-submit the exception form.

Installation and Configuration (MacOS)

  1. Go to https://psomvpn.uphs.upenn.edu
  2. Log in using your PMACS credentials and complete DUO two-factor authentication (type push, sms, or phone)
  3. Download and install the MacOS 32/64-bit GlobalProtect installer
  4. Launch GlobalProtect (click the globe icon in the top-right menu bar)   GlobalProtect Mac Icon
  5. In the Portal Address field, enter: psomvpn.uphs.upenn.edu
  6. Click Connect and log in with your PMACS credentials
  7. When prompted for "Verification Code", authenticate using DUO:
    • Type push for push notification (recommended)
    • Type phone for phone call
    • Type sms for text message
    • Or open the DUO app and enter the 6-digit code under your University of Pennsylvania profile