Frequently Asked Questions about GlobalProtect VPN

GlobalProtect VPN is a Virtual Private Network (VPN) solution from Palo Alto networks.

No, BCIT’s implementation of GlobalProtect does not support iOS, Android or Linux.

While there are versions available to download on the Apple Store and Playstore for those devices, they will not work with BCIT’s VPN at this time.

BCIT’s GlobalProtect VPN only works with MacOS or Windows operating systems.

Yes, BCIT requires Multi-Factor Authentication (MFA) when connecting to the GlobalProtect VPN, no different than the normal BCIT login process.

MFA is now enforced at BCIT – MFA helps protect your account and BCIT’s network by adding an extra layer of security. Even if your password is compromised, unauthorized users won’t be able to access the VPN without your multi-factor authentication.

To learn more about MFA at BCIT, please refer to the articles for Faculty & Staff and Students.

For those using AppsAnywhere remotely, Yes. Some applications require licensing from BCIT’s internal servers to run. To access these licenses, a secure connection to BCIT’s network is necessary. GlobalProtect VPN required method for connecting to BCIT’s network for licensing.

GlobalProtect VPN uses split-tunneling. This means that when you visit common internet sites—such as Google or other non-BCIT websites—your own internet connection is used directly. However, when you access BCIT web resources, network services such as shared drives, printers, or other internal systems, GlobalProtect routes that traffic through the secure VPN tunnel to connect you to BCIT’s internal network.

When connecting through GlobalProtect (GP), users will be prompted to complete Multi-Factor Authentication (MFA). Most users will only receive one MFA prompt; however, some specialty support users may encounter two prompts during the connection process:

1. Standard Login – When signing into GlobalProtect with their regular user account (via Microsoft Authenticator)
2. Elevated Access – When accessing secure server resources using a System Administrator (privileged, SA) account (via Duo MFA)

Contractors will be enrolled in MFA and provided instructions on how to set it up during their account creation and onboarding process.

For instructions on how to install the GlobalProtect client on non-BCIT devices, refer to the article:  Installing and Connecting to GlobalProtect