VPN - Frequently Asked Questions

Questions

Q1. What is the server that I should connect to from the application?

Q2. What address range will I receive when connected to the GlobalProtect VPN?

Q3. Is the service a full-tunnel or split-tunnel VPN?

Q4. How often is the client updated?

Q5. I am unable to connect to a resource on the GlobalProtect VPN that I was able to previously. How do I fix that?

Q6. I connected to the VPN, but I can't access any university resources. What is happening?

Answers

A1. What is the server that I should connect to from the application?

• When connecting for the first time, the "portal" should be set to nu-vpn.nebraska.edu

A2. What address range will I receive when connected to the GlobalProtect VPN?

• You will be assigned a dynamic IP in the range of 10.144.0.0/19.  To allow access to any systems that you manage, you will need to make sure that this range is allowed through any applicable firewalls.

A3. Is the service a full-tunnel or split-tunnel VPN?

• The GlobalProtect VPN is a hyrid full-tunnel/split-tunnel, cloud-based service.  All traffic will be routed to the cloud gateway and from there, only traffic destined to the University will continue on in a tunnel.  Internet-destined traffic will route out directly from the cloud firewall.  This configuration also allows you to access resources on your local network, such as a networked printer or server at home, as well as being able to stream music and video while connected the VPN.

A4. How often is the client updated?

• Client updates are typically available every three months or so.  When a new update is available from the vendor, the client will prompt you to install the update when you log into the VPN.

A5. I am unable to connect to a resource on the GlobalProtect VPN that I was able to previously. How do I fix that?

• Please submit a service request and provide the following information:
  • The resource you're connecting to
  • The resource you're connecting from
  • The most recent connection attempt
  • What the connection to the resource is being used for

A6. I connected to the VPN, but I can't access any university resources. What is happening?

• The connecting device is likely failing the GlobalProtect Host Information Profile (HIP) checks. Devices must pass all HIP checks to be able to connect to university resources. The most common HIP check failure that may not be easily recognized in Linux devices is if the device is not in the Supported Operating Systems list. If the Operating System is not explicitly in this list, the device will fail the HIP check and not allow connections to university resources.