CINXE.COM
PaloAlto VPN (Windows) - Device and Productivity Software
<!doctype html> <html lang="en" class="no-js"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width,initial-scale=1"> <meta name="description" content="Device and Productivity Software Services Documentation"> <meta name="author" content="CERN Authoring"> <link rel="canonical" href="https://devices.docs.cern.ch/pss/PaloAltoVPN/"> <link rel="icon" href="../../assets/images/favicon.png"> <meta name="generator" content="mkdocs-1.3.1, mkdocs-material-8.5.3"> <title>PaloAlto VPN (Windows) - Device and Productivity Software</title> <link rel="stylesheet" href="../../assets/stylesheets/main.7a952b86.min.css"> <link rel="stylesheet" href="../../assets/stylesheets/palette.cbb835fc.min.css"> <link rel="stylesheet" href="../../css/style.css"> <link rel="stylesheet" href="../../stylesheets/fonts.css"> <script>__md_scope=new URL("../..",location),__md_hash=e=>[...e].reduce((e,_)=>(e<<5)-e+_.charCodeAt(0),0),__md_get=(e,_=localStorage,t=__md_scope)=>JSON.parse(_.getItem(t.pathname+"."+e)),__md_set=(e,_,t=localStorage,a=__md_scope)=>{try{t.setItem(a.pathname+"."+e,JSON.stringify(_))}catch(e){}}</script> </head> <body dir="ltr" data-md-color-scheme="" data-md-color-primary="none" data-md-color-accent="none"> <input class="md-toggle" data-md-toggle="drawer" type="checkbox" id="__drawer" autocomplete="off"> <input class="md-toggle" data-md-toggle="search" type="checkbox" id="__search" autocomplete="off"> <label class="md-overlay" for="__drawer"></label> <div data-md-component="skip"> <a href="#paloalto-vpn" class="md-skip"> Skip to content </a> </div> <div data-md-component="announce"> </div> <header class="md-header" data-md-component="header"> <nav class="md-header__inner md-grid" aria-label="Header"> <a href="../.." title="Device and Productivity Software" class="md-header__button md-logo" aria-label="Device and Productivity Software" data-md-component="logo"> <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 8a3 3 0 0 0 3-3 3 3 0 0 0-3-3 3 3 0 0 0-3 3 3 3 0 0 0 3 3m0 3.54C9.64 9.35 6.5 8 3 8v11c3.5 0 6.64 1.35 9 3.54 2.36-2.19 5.5-3.54 9-3.54V8c-3.5 0-6.64 1.35-9 3.54Z"/></svg> </a> <label class="md-header__button md-icon" for="__drawer"> <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M3 6h18v2H3V6m0 5h18v2H3v-2m0 5h18v2H3v-2Z"/></svg> </label> <div class="md-header__title" data-md-component="header-title"> <div class="md-header__ellipsis"> <div class="md-header__topic"> <span class="md-ellipsis"> Device and Productivity Software </span> </div> <div class="md-header__topic" data-md-component="header-topic"> <span class="md-ellipsis"> PaloAlto VPN (Windows) </span> </div> </div> </div> <label class="md-header__button md-icon" for="__search"> <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M9.5 3A6.5 6.5 0 0 1 16 9.5c0 1.61-.59 3.09-1.56 4.23l.27.27h.79l5 5-1.5 1.5-5-5v-.79l-.27-.27A6.516 6.516 0 0 1 9.5 16 6.5 6.5 0 0 1 3 9.5 6.5 6.5 0 0 1 9.5 3m0 2C7 5 5 7 5 9.5S7 14 9.5 14 14 12 14 9.5 12 5 9.5 5Z"/></svg> </label> <div class="md-search" data-md-component="search" role="dialog"> <label class="md-search__overlay" for="__search"></label> <div class="md-search__inner" role="search"> <form class="md-search__form" name="search"> <input type="text" class="md-search__input" name="query" aria-label="Search" placeholder="Search" autocapitalize="off" autocorrect="off" autocomplete="off" spellcheck="false" data-md-component="search-query" required> <label class="md-search__icon md-icon" for="__search"> <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M9.5 3A6.5 6.5 0 0 1 16 9.5c0 1.61-.59 3.09-1.56 4.23l.27.27h.79l5 5-1.5 1.5-5-5v-.79l-.27-.27A6.516 6.516 0 0 1 9.5 16 6.5 6.5 0 0 1 3 9.5 6.5 6.5 0 0 1 9.5 3m0 2C7 5 5 7 5 9.5S7 14 9.5 14 14 12 14 9.5 12 5 9.5 5Z"/></svg> <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M20 11v2H8l5.5 5.5-1.42 1.42L4.16 12l7.92-7.92L13.5 5.5 8 11h12Z"/></svg> </label> <nav class="md-search__options" aria-label="Search"> <button type="reset" class="md-search__icon md-icon" title="Clear" aria-label="Clear" tabindex="-1"> <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M19 6.41 17.59 5 12 10.59 6.41 5 5 6.41 10.59 12 5 17.59 6.41 19 12 13.41 17.59 19 19 17.59 13.41 12 19 6.41Z"/></svg> </button> </nav> </form> <div class="md-search__output"> <div class="md-search__scrollwrap" data-md-scrollfix> <div class="md-search-result" data-md-component="search-result"> <div class="md-search-result__meta"> Initializing search </div> <ol class="md-search-result__list"></ol> </div> </div> </div> </div> </div> <div class="md-header__source"> <a href="https://gitlab.cern.ch/IT-DEP-CDA-AD/devices-docs" title="Go to repository" class="md-source" data-md-component="source"> <div class="md-source__icon md-icon"> <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512"><!--! Font Awesome Free 6.2.0 by @fontawesome - https://fontawesome.com License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) Copyright 2022 Fonticons, Inc.--><path d="M439.55 236.05 244 40.45a28.87 28.87 0 0 0-40.81 0l-40.66 40.63 51.52 51.52c27.06-9.14 52.68 16.77 43.39 43.68l49.66 49.66c34.23-11.8 61.18 31 35.47 56.69-26.49 26.49-70.21-2.87-56-37.34L240.22 199v121.85c25.3 12.54 22.26 41.85 9.08 55a34.34 34.34 0 0 1-48.55 0c-17.57-17.6-11.07-46.91 11.25-56v-123c-20.8-8.51-24.6-30.74-18.64-45L142.57 101 8.45 235.14a28.86 28.86 0 0 0 0 40.81l195.61 195.6a28.86 28.86 0 0 0 40.8 0l194.69-194.69a28.86 28.86 0 0 0 0-40.81z"/></svg> </div> <div class="md-source__repository"> it-cda-ad/devices-docs </div> </a> </div> </nav> </header> <div class="md-container" data-md-component="container"> <nav class="md-tabs" aria-label="Tabs" data-md-component="tabs"> <div class="md-tabs__inner md-grid"> <ul class="md-tabs__list"> <li class="md-tabs__item"> <a href="../.." class="md-tabs__link"> Introduction </a> </li> <li class="md-tabs__item"> <a href="../../devices/" class="md-tabs__link"> Devices </a> </li> <li class="md-tabs__item"> <a href="../" class="md-tabs__link md-tabs__link--active"> Productivity Software </a> </li> </ul> </div> </nav> <main class="md-main" data-md-component="main"> <div class="md-main__inner md-grid"> <div class="md-sidebar md-sidebar--primary" data-md-component="sidebar" data-md-type="navigation" > <div class="md-sidebar__scrollwrap"> <div class="md-sidebar__inner"> <nav class="md-nav md-nav--primary md-nav--lifted" aria-label="Navigation" data-md-level="0"> <label class="md-nav__title" for="__drawer"> <a href="../.." title="Device and Productivity Software" class="md-nav__button md-logo" aria-label="Device and Productivity Software" data-md-component="logo"> <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 8a3 3 0 0 0 3-3 3 3 0 0 0-3-3 3 3 0 0 0-3 3 3 3 0 0 0 3 3m0 3.54C9.64 9.35 6.5 8 3 8v11c3.5 0 6.64 1.35 9 3.54 2.36-2.19 5.5-3.54 9-3.54V8c-3.5 0-6.64 1.35-9 3.54Z"/></svg> </a> Device and Productivity Software </label> <div class="md-nav__source"> <a href="https://gitlab.cern.ch/IT-DEP-CDA-AD/devices-docs" title="Go to repository" class="md-source" data-md-component="source"> <div class="md-source__icon md-icon"> <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512"><!--! Font Awesome Free 6.2.0 by @fontawesome - https://fontawesome.com License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) Copyright 2022 Fonticons, Inc.--><path d="M439.55 236.05 244 40.45a28.87 28.87 0 0 0-40.81 0l-40.66 40.63 51.52 51.52c27.06-9.14 52.68 16.77 43.39 43.68l49.66 49.66c34.23-11.8 61.18 31 35.47 56.69-26.49 26.49-70.21-2.87-56-37.34L240.22 199v121.85c25.3 12.54 22.26 41.85 9.08 55a34.34 34.34 0 0 1-48.55 0c-17.57-17.6-11.07-46.91 11.25-56v-123c-20.8-8.51-24.6-30.74-18.64-45L142.57 101 8.45 235.14a28.86 28.86 0 0 0 0 40.81l195.61 195.6a28.86 28.86 0 0 0 40.8 0l194.69-194.69a28.86 28.86 0 0 0 0-40.81z"/></svg> </div> <div class="md-source__repository"> it-cda-ad/devices-docs </div> </a> </div> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../.." class="md-nav__link"> Introduction </a> </li> <li class="md-nav__item md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_2" type="checkbox" id="__nav_2" > <label class="md-nav__link" for="__nav_2"> Devices <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="Devices" data-md-level="1"> <label class="md-nav__title" for="__nav_2"> <span class="md-nav__icon md-icon"></span> Devices </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../../devices/" class="md-nav__link"> Introduction </a> </li> <li class="md-nav__item"> <a href="../../devices/android/" class="md-nav__link"> Android </a> </li> <li class="md-nav__item md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_2_3" type="checkbox" id="__nav_2_3" > <label class="md-nav__link" for="__nav_2_3"> macOS <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="macOS" data-md-level="2"> <label class="md-nav__title" for="__nav_2_3"> <span class="md-nav__icon md-icon"></span> macOS </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../../devices/mac/" class="md-nav__link"> Introduction </a> </li> <li class="md-nav__item"> <a href="../../devices/mac/AboutAppleSiliconMacs/" class="md-nav__link"> About Apple Silicon ("M1") Macs </a> </li> <li class="md-nav__item"> <a href="../../devices/mac/macos_versions/" class="md-nav__link"> About macOS Versions </a> </li> <li class="md-nav__item"> <a href="../../devices/mac/AboutSoftwareUpdates/" class="md-nav__link"> About Software Updates </a> </li> <li class="md-nav__item"> <a href="../../devices/mac/PurchasingAppleHardware/" class="md-nav__link"> Purchasing Apple Hardware </a> </li> <li class="md-nav__item"> <a href="../../devices/mac/Installation/" class="md-nav__link"> Installation at CERN </a> </li> <li class="md-nav__item md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_2_3_7" type="checkbox" id="__nav_2_3_7" > <label class="md-nav__link" for="__nav_2_3_7"> Getting applications for macOS <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="Getting applications for macOS" data-md-level="3"> <label class="md-nav__title" for="__nav_2_3_7"> <span class="md-nav__icon md-icon"></span> Getting applications for macOS </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../../devices/mac/AcquiringApplications/" class="md-nav__link"> Introduction </a> </li> <li class="md-nav__item"> <a href="../../devices/mac/MacSelfService/" class="md-nav__link"> The Mac Self-Service </a> </li> <li class="md-nav__item"> <a href="../../devices/mac/AppleAppStore/" class="md-nav__link"> The Apple App Store </a> </li> <li class="md-nav__item"> <a href="../../devices/mac/MicrosoftOfficeMac/" class="md-nav__link"> Microsoft Office Apps </a> </li> </ul> </nav> </li> <li class="md-nav__item"> <a href="../../devices/mac/HomeFolders/" class="md-nav__link"> Home folders </a> </li> <li class="md-nav__item md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_2_3_9" type="checkbox" id="__nav_2_3_9" > <label class="md-nav__link" for="__nav_2_3_9"> The Mac Self-Service <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="The Mac Self-Service" data-md-level="3"> <label class="md-nav__title" for="__nav_2_3_9"> <span class="md-nav__icon md-icon"></span> The Mac Self-Service </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../../devices/mac/MacSelfService/" class="md-nav__link"> Introduction </a> </li> <li class="md-nav__item"> <a href="../../devices/mac/MacSelfService/Enrolling/" class="md-nav__link"> Enrolling a Mac </a> </li> <li class="md-nav__item"> <a href="../../devices/mac/MacSelfService/Using/" class="md-nav__link"> Using the Self-Service app </a> </li> <li class="md-nav__item"> <a href="../../devices/mac/MacSelfService/Troubleshooting/" class="md-nav__link"> Troubleshooting </a> </li> <li class="md-nav__item"> <a href="../../devices/mac/MacSelfService/Unenrolling/" class="md-nav__link"> Unenrolling a Mac </a> </li> <li class="md-nav__item"> <a href="../../devices/mac/MacSelfService/outdatedMajorOs/" class="md-nav__link"> Alerts for Unsupported Major OS versions </a> </li> </ul> </nav> </li> <li class="md-nav__item"> <a href="../../devices/mac/printing/" class="md-nav__link"> Printing from macOS </a> </li> <li class="md-nav__item"> <a href="../../devices/mac/RepairingAppleHardware/" class="md-nav__link"> Repairing Apple Hardware </a> </li> <li class="md-nav__item"> <a href="../../devices/mac/AboutKerberosAndSsh/" class="md-nav__link"> Configuring kerberos and ssh </a> </li> <li class="md-nav__item"> <a href="../../devices/mac/TouchIDFor2FA/" class="md-nav__link"> Using Built-in Fingerprint Reader for 2FA </a> </li> <li class="md-nav__item"> <a href="../../devices/mac/sshTunnel/" class="md-nav__link"> Accessing Internal Webpages from Outside CERN </a> </li> <li class="md-nav__item"> <a href="../../devices/mac/DiskEncryption/" class="md-nav__link"> Disk Encryption </a> </li> <li class="md-nav__item md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_2_3_16" type="checkbox" id="__nav_2_3_16" > <label class="md-nav__link" for="__nav_2_3_16"> Further information <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="Further information" data-md-level="3"> <label class="md-nav__title" for="__nav_2_3_16"> <span class="md-nav__icon md-icon"></span> Further information </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../../devices/mac/MacServiceDocs/" class="md-nav__link"> Mac Service (CERN Service Portal) </a> </li> <li class="md-nav__item"> <a href="../../devices/mac/MacCERNKBs/" class="md-nav__link"> Knowledge Base (CERN Service Portal) </a> </li> <li class="md-nav__item"> <a href="../../devices/mac/AppleDocs/" class="md-nav__link"> Apple Documentation </a> </li> </ul> </nav> </li> </ul> </nav> </li> <li class="md-nav__item md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_2_4" type="checkbox" id="__nav_2_4" > <label class="md-nav__link" for="__nav_2_4"> iOS <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="iOS" data-md-level="2"> <label class="md-nav__title" for="__nav_2_4"> <span class="md-nav__icon md-icon"></span> iOS </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../../devices/ios/" class="md-nav__link"> Introduction </a> </li> <li class="md-nav__item"> <a href="../../devices/mac/PurchasingAppleHardware/" class="md-nav__link"> Purchasing </a> </li> <li class="md-nav__item"> <a href="../../devices/ios/FrequentIssues/" class="md-nav__link"> Frequent Issues </a> </li> </ul> </nav> </li> <li class="md-nav__item"> <a href="../../devices/ppc/" class="md-nav__link"> Public PC </a> </li> <li class="md-nav__item"> <a href="../../devices/kiosk/" class="md-nav__link"> Requesting a KIOSK </a> </li> <li class="md-nav__item"> <a href="../../devices/PC-HW/" class="md-nav__link"> Screens for PCs and Macs </a> </li> <li class="md-nav__item md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_2_8" type="checkbox" id="__nav_2_8" > <label class="md-nav__link" for="__nav_2_8"> Windows <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="Windows" data-md-level="2"> <label class="md-nav__title" for="__nav_2_8"> <span class="md-nav__icon md-icon"></span> Windows </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../../devices/windows/" class="md-nav__link"> Introduction </a> </li> <li class="md-nav__item"> <a href="../../devices/windows/setupWindowsForCERN/" class="md-nav__link"> Set up Windows device for CERN </a> </li> <li class="md-nav__item md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_2_8_3" type="checkbox" id="__nav_2_8_3" > <label class="md-nav__link" for="__nav_2_8_3"> About Windows versions <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="About Windows versions" data-md-level="3"> <label class="md-nav__title" for="__nav_2_8_3"> <span class="md-nav__icon md-icon"></span> About Windows versions </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../../devices/windows/win11/" class="md-nav__link"> Windows 11 </a> </li> <li class="md-nav__item"> <a href="../../devices/windows/win10/" class="md-nav__link"> Windows 10 </a> </li> <li class="md-nav__item"> <a href="../../devices/windows/win7/" class="md-nav__link"> Windows 7 </a> </li> </ul> </nav> </li> <li class="md-nav__item md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_2_8_4" type="checkbox" id="__nav_2_8_4" > <label class="md-nav__link" for="__nav_2_8_4"> CMF <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="CMF" data-md-level="3"> <label class="md-nav__title" for="__nav_2_8_4"> <span class="md-nav__icon md-icon"></span> CMF </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../../devices/windows/cmf/" class="md-nav__link"> Introduction </a> </li> <li class="md-nav__item"> <a href="../../devices/windows/cmf/users_guide/" class="md-nav__link"> How to use CMF </a> </li> <li class="md-nav__item"> <a href="../../devices/windows/cmf/admin_guide/" class="md-nav__link"> Administrators Guide </a> </li> <li class="md-nav__item"> <a href="../../devices/windows/cmf/project_requirements/" class="md-nav__link"> Project Requirements </a> </li> <li class="md-nav__item"> <a href="../../devices/windows/cmf/technical_description/" class="md-nav__link"> Technical Description </a> </li> </ul> </nav> </li> <li class="md-nav__item md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_2_8_5" type="checkbox" id="__nav_2_8_5" > <label class="md-nav__link" for="__nav_2_8_5"> CERN AppStore <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="CERN AppStore" data-md-level="3"> <label class="md-nav__title" for="__nav_2_8_5"> <span class="md-nav__icon md-icon"></span> CERN AppStore </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../../devices/windows/CERNAppstore/client/" class="md-nav__link"> How to use CERN AppStore </a> </li> </ul> </nav> </li> <li class="md-nav__item"> <a href="../../devices/windows/encryption/" class="md-nav__link"> Disk Encryption </a> </li> <li class="md-nav__item md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_2_8_7" type="checkbox" id="__nav_2_8_7" > <label class="md-nav__link" for="__nav_2_8_7"> Further information <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="Further information" data-md-level="3"> <label class="md-nav__title" for="__nav_2_8_7"> <span class="md-nav__icon md-icon"></span> Further information </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../../devices/windows/windowsServiceDocs/" class="md-nav__link"> Windows Service (CERN Service Portal) </a> </li> <li class="md-nav__item"> <a href="../../devices/windows/windowsCERNKBs/" class="md-nav__link"> Knowledge Base (CERN Service Portal) </a> </li> <li class="md-nav__item"> <a href="../../devices/windows/microsoftDocs/" class="md-nav__link"> Microsoft Documentation </a> </li> </ul> </nav> </li> <li class="md-nav__item"> <a href="../../devices/windows/homeFolders/" class="md-nav__link"> Home folders </a> </li> <li class="md-nav__item"> <a href="../../devices/windows/installation/" class="md-nav__link"> Installation at CERN </a> </li> <li class="md-nav__item"> <a href="../../devices/windows/joindomain/" class="md-nav__link"> Joining the CERN domain </a> </li> <li class="md-nav__item"> <a href="../../devices/windows/windowsUpgrades/" class="md-nav__link"> Upgrading your Windows version </a> </li> <li class="md-nav__item"> <a href="../../devices/windows/updates/" class="md-nav__link"> Keeping your computer up-to-date </a> </li> <li class="md-nav__item"> <a href="../../devices/windows/WebAuthnWindows/" class="md-nav__link"> Using your fingerprint for 2FA </a> </li> <li class="md-nav__item"> <a href="../../devices/windows/win11_application/" class="md-nav__link"> Follow-up Windows 11 Migration </a> </li> <li class="md-nav__item"> <a href="../../devices/windows/win11_downgrade/" class="md-nav__link"> Downgrade from Windows 11 to Windows 10 </a> </li> <li class="md-nav__item"> <a href="../../devices/windows/create_a_windows_virtual_machine/" class="md-nav__link"> Create a Windows virtual machine </a> </li> <li class="md-nav__item md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_2_8_17" type="checkbox" id="__nav_2_8_17" > <label class="md-nav__link" for="__nav_2_8_17"> Managing permissions on the file system <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="Managing permissions on the file system" data-md-level="3"> <label class="md-nav__title" for="__nav_2_8_17"> <span class="md-nav__icon md-icon"></span> Managing permissions on the file system </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../../devices/windows/permissions/" class="md-nav__link"> Best practices to manage permissions </a> </li> <li class="md-nav__item"> <a href="../../devices/windows/acl/" class="md-nav__link"> ACLs, ACE, Permissions...How to handle File Security? </a> </li> </ul> </nav> </li> <li class="md-nav__item"> <a href="../../devices/windows/renameandmove/" class="md-nav__link"> Moving or renaming your computer </a> </li> <li class="md-nav__item"> <a href="../../devices/windows/printing/" class="md-nav__link"> Printing from Windows </a> </li> <li class="md-nav__item md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_2_8_20" type="checkbox" id="__nav_2_8_20" > <label class="md-nav__link" for="__nav_2_8_20"> Privacy on Windows <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="Privacy on Windows" data-md-level="3"> <label class="md-nav__title" for="__nav_2_8_20"> <span class="md-nav__icon md-icon"></span> Privacy on Windows </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../../devices/windows/privacy/" class="md-nav__link"> Windows 10 </a> </li> <li class="md-nav__item"> <a href="../../devices/windows/privacy_w11/" class="md-nav__link"> Windows 11 </a> </li> </ul> </nav> </li> <li class="md-nav__item"> <a href="../../devices/windows/hardware/" class="md-nav__link"> Purchasing Windows hardware </a> </li> <li class="md-nav__item"> <a href="../../devices/windows/hwRepair/" class="md-nav__link"> Repairing Windows hardware </a> </li> <li class="md-nav__item"> <a href="../../devices/windows/reset/" class="md-nav__link"> Resetting Windows hardware </a> </li> <li class="md-nav__item"> <a href="../../devices/windows/windowsServices/" class="md-nav__link"> Windows Toolbox webpage </a> </li> </ul> </nav> </li> </ul> </nav> </li> <li class="md-nav__item md-nav__item--active md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_3" type="checkbox" id="__nav_3" checked> <label class="md-nav__link" for="__nav_3"> Productivity Software <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="Productivity Software" data-md-level="1"> <label class="md-nav__title" for="__nav_3"> <span class="md-nav__icon md-icon"></span> Productivity Software </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../" class="md-nav__link"> Introduction </a> </li> <li class="md-nav__item"> <a href="../antivirus/" class="md-nav__link"> Antivirus </a> </li> <li class="md-nav__item md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_3_3" type="checkbox" id="__nav_3_3" > <label class="md-nav__link" for="__nav_3_3"> Authoring (e-Learning) <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="Authoring (e-Learning)" data-md-level="2"> <label class="md-nav__title" for="__nav_3_3"> <span class="md-nav__icon md-icon"></span> Authoring (e-Learning) </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../atomi-ap/" class="md-nav__link"> Atomi ActivePresenter </a> </li> </ul> </nav> </li> <li class="md-nav__item md-nav__item--active md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_3_4" type="checkbox" id="__nav_3_4" checked> <label class="md-nav__link" for="__nav_3_4"> Connectivity software <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="Connectivity software" data-md-level="2"> <label class="md-nav__title" for="__nav_3_4"> <span class="md-nav__icon md-icon"></span> Connectivity software </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../andftp/" class="md-nav__link"> AndFTP (Android) </a> </li> <li class="md-nav__item"> <a href="../RemoteDesktopClientMac/" class="md-nav__link"> Windows App (Mac) </a> </li> <li class="md-nav__item"> <a href="../putty/" class="md-nav__link"> PuTTY (Windows) </a> </li> <li class="md-nav__item md-nav__item--active"> <input class="md-nav__toggle md-toggle" data-md-toggle="toc" type="checkbox" id="__toc"> <label class="md-nav__link md-nav__link--active" for="__toc"> PaloAlto VPN (Windows) <span class="md-nav__icon md-icon"></span> </label> <a href="./" class="md-nav__link md-nav__link--active"> PaloAlto VPN (Windows) </a> <nav class="md-nav md-nav--secondary" aria-label="Table of contents"> <label class="md-nav__title" for="__toc"> <span class="md-nav__icon md-icon"></span> Table of contents </label> <ul class="md-nav__list" data-md-component="toc" data-md-scrollfix> <li class="md-nav__item"> <a href="#introduction" class="md-nav__link"> Introduction </a> </li> <li class="md-nav__item"> <a href="#what-is-a-vpn" class="md-nav__link"> What is a VPN? </a> </li> <li class="md-nav__item"> <a href="#what-does-a-vpn-do" class="md-nav__link"> What does a VPN do? </a> </li> <li class="md-nav__item"> <a href="#what-this-vpn-doesnt-do" class="md-nav__link"> What this VPN doesn't do </a> </li> <li class="md-nav__item"> <a href="#installing-paloaltovpn" class="md-nav__link"> Installing PaloAltoVPN </a> <nav class="md-nav" aria-label="Installing PaloAltoVPN"> <ul class="md-nav__list"> <li class="md-nav__item"> <a href="#how-to-install-paloaltovpn-when-inside-the-cern-network" class="md-nav__link"> How to install PaloAltoVPN when inside the CERN network </a> </li> <li class="md-nav__item"> <a href="#how-to-install-paloaltovpn-when-outside-the-cern-network" class="md-nav__link"> How to install PaloAltoVPN when outside the CERN network </a> </li> </ul> </nav> </li> <li class="md-nav__item"> <a href="#how-to-connect-to-paloaltovpn" class="md-nav__link"> How to connect to PaloAltoVPN </a> </li> <li class="md-nav__item"> <a href="#mapping-cern-dfs-drives" class="md-nav__link"> Mapping CERN DFS drives </a> </li> </ul> </nav> </li> <li class="md-nav__item"> <a href="../termbot/" class="md-nav__link"> Termbot (Android) </a> </li> <li class="md-nav__item"> <a href="../xwin32/" class="md-nav__link"> XWin-32 (Windows) </a> </li> </ul> </nav> </li> <li class="md-nav__item md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_3_5" type="checkbox" id="__nav_3_5" > <label class="md-nav__link" for="__nav_3_5"> Cloud storage <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="Cloud storage" data-md-level="2"> <label class="md-nav__title" for="__nav_3_5"> <span class="md-nav__icon md-icon"></span> Cloud storage </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../cernbox/" class="md-nav__link"> CERNBox </a> </li> <li class="md-nav__item"> <a href="../onedrive_cern/" class="md-nav__link"> OneDrive </a> </li> </ul> </nav> </li> <li class="md-nav__item md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_3_6" type="checkbox" id="__nav_3_6" > <label class="md-nav__link" for="__nav_3_6"> Development <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="Development" data-md-level="2"> <label class="md-nav__title" for="__nav_3_6"> <span class="md-nav__icon md-icon"></span> Development </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../visualstudio/" class="md-nav__link"> MS Visual Studio </a> </li> <li class="md-nav__item"> <a href="../VSCode/" class="md-nav__link"> Visual Studio Code </a> </li> </ul> </nav> </li> <li class="md-nav__item md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_3_7" type="checkbox" id="__nav_3_7" > <label class="md-nav__link" for="__nav_3_7"> Diagrams <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="Diagrams" data-md-level="2"> <label class="md-nav__title" for="__nav_3_7"> <span class="md-nav__icon md-icon"></span> Diagrams </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../diagrams/" class="md-nav__link"> Introduction </a> </li> <li class="md-nav__item"> <a href="../draw.io/" class="md-nav__link"> Draw.IO </a> </li> <li class="md-nav__item"> <a href="../visionline/" class="md-nav__link"> MS Visio Online </a> </li> <li class="md-nav__item"> <a href="../visio365/" class="md-nav__link"> MS Visio 365 </a> </li> </ul> </nav> </li> <li class="md-nav__item md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_3_8" type="checkbox" id="__nav_3_8" > <label class="md-nav__link" for="__nav_3_8"> Graphics editing <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="Graphics editing" data-md-level="2"> <label class="md-nav__title" for="__nav_3_8"> <span class="md-nav__icon md-icon"></span> Graphics editing </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../adobecreativecloud/" class="md-nav__link"> Adobe Creative Cloud </a> </li> <li class="md-nav__item"> <a href="../gimp/" class="md-nav__link"> Gimp </a> </li> <li class="md-nav__item"> <a href="../inkscape/" class="md-nav__link"> Inkscape </a> </li> <li class="md-nav__item"> <a href="../paintnet/" class="md-nav__link"> Paint.NET (Windows) </a> </li> </ul> </nav> </li> <li class="md-nav__item md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_3_9" type="checkbox" id="__nav_3_9" > <label class="md-nav__link" for="__nav_3_9"> Note taking <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="Note taking" data-md-level="2"> <label class="md-nav__title" for="__nav_3_9"> <span class="md-nav__icon md-icon"></span> Note taking </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../codi/" class="md-nav__link"> CodiMD </a> </li> <li class="md-nav__item"> <a href="../onenote/" class="md-nav__link"> OneNote </a> </li> </ul> </nav> </li> <li class="md-nav__item md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_3_10" type="checkbox" id="__nav_3_10" > <label class="md-nav__link" for="__nav_3_10"> Office suites <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="Office suites" data-md-level="2"> <label class="md-nav__title" for="__nav_3_10"> <span class="md-nav__icon md-icon"></span> Office suites </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../office-suites/" class="md-nav__link"> Introduction </a> </li> <li class="md-nav__item md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_3_10_2" type="checkbox" id="__nav_3_10_2" > <label class="md-nav__link" for="__nav_3_10_2"> Microsoft Office <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="Microsoft Office" data-md-level="3"> <label class="md-nav__title" for="__nav_3_10_2"> <span class="md-nav__icon md-icon"></span> Microsoft Office </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../office365/" class="md-nav__link"> Using Office 365 </a> </li> <li class="md-nav__item"> <a href="../ms_office/" class="md-nav__link"> Office 365 Privacy </a> </li> <li class="md-nav__item"> <a href="../proofing/" class="md-nav__link"> Proofing Tools for Office 365 </a> </li> </ul> </nav> </li> <li class="md-nav__item"> <a href="../overleaf/" class="md-nav__link"> Overleaf </a> </li> </ul> </nav> </li> <li class="md-nav__item"> <a href="../pdf-reading/" class="md-nav__link"> PDF reading </a> </li> <li class="md-nav__item"> <a href="../microsoft_copilot/" class="md-nav__link"> Microsoft Copilot </a> </li> <li class="md-nav__item md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_3_13" type="checkbox" id="__nav_3_13" > <label class="md-nav__link" for="__nav_3_13"> PDF editing <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="PDF editing" data-md-level="2"> <label class="md-nav__title" for="__nav_3_13"> <span class="md-nav__icon md-icon"></span> PDF editing </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../preview/" class="md-nav__link"> Preview (macOS) </a> </li> <li class="md-nav__item"> <a href="../pdfxchange/" class="md-nav__link"> PDF-XChange (Windows) </a> </li> <li class="md-nav__item"> <a href="../pdfexpert/" class="md-nav__link"> PDF Expert (macOS) </a> </li> <li class="md-nav__item"> <a href="../adobeacrobat/" class="md-nav__link"> Adobe Acrobat Pro DC </a> </li> </ul> </nav> </li> <li class="md-nav__item md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_3_14" type="checkbox" id="__nav_3_14" > <label class="md-nav__link" for="__nav_3_14"> Password management <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="Password management" data-md-level="2"> <label class="md-nav__title" for="__nav_3_14"> <span class="md-nav__icon md-icon"></span> Password management </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../keepass2android/" class="md-nav__link"> Keepass2Android </a> </li> <li class="md-nav__item"> <a href="../keepass_xc/" class="md-nav__link"> Keepass XC </a> </li> <li class="md-nav__item"> <a href="../strongbox/" class="md-nav__link"> Strongbox (iOS) </a> </li> <li class="md-nav__item"> <a href="../tbag/" class="md-nav__link"> tbag </a> </li> </ul> </nav> </li> <li class="md-nav__item md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_3_15" type="checkbox" id="__nav_3_15" > <label class="md-nav__link" for="__nav_3_15"> Project management <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="Project management" data-md-level="2"> <label class="md-nav__title" for="__nav_3_15"> <span class="md-nav__icon md-icon"></span> Project management </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../gantt-chart-viewer/" class="md-nav__link"> Gantt Chart Viewer </a> </li> <li class="md-nav__item"> <a href="../jira/" class="md-nav__link"> JIRA </a> </li> <li class="md-nav__item"> <a href="../project/" class="md-nav__link"> Microsoft Project </a> </li> </ul> </nav> </li> <li class="md-nav__item md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_3_16" type="checkbox" id="__nav_3_16" > <label class="md-nav__link" for="__nav_3_16"> Virtualization software <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="Virtualization software" data-md-level="2"> <label class="md-nav__title" for="__nav_3_16"> <span class="md-nav__icon md-icon"></span> Virtualization software </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../hyperv/" class="md-nav__link"> Hyper-V (Windows) </a> </li> <li class="md-nav__item"> <a href="../openstack/" class="md-nav__link"> OpenStack </a> </li> <li class="md-nav__item"> <a href="../virtualbox/" class="md-nav__link"> Oracle VirtualBox </a> </li> <li class="md-nav__item"> <a href="../parallels/" class="md-nav__link"> Parallels (macOS) </a> </li> </ul> </nav> </li> <li class="md-nav__item md-nav__item--nested"> <input class="md-nav__toggle md-toggle" data-md-toggle="__nav_3_17" type="checkbox" id="__nav_3_17" > <label class="md-nav__link" for="__nav_3_17"> Web Authoring software <span class="md-nav__icon md-icon"></span> </label> <nav class="md-nav" aria-label="Web Authoring software" data-md-level="2"> <label class="md-nav__title" for="__nav_3_17"> <span class="md-nav__icon md-icon"></span> Web Authoring software </label> <ul class="md-nav__list" data-md-scrollfix> <li class="md-nav__item"> <a href="../webauth/" class="md-nav__link"> Web Authoring tools for Desktops </a> </li> </ul> </nav> </li> </ul> </nav> </li> </ul> </nav> </div> </div> </div> <div class="md-sidebar md-sidebar--secondary" data-md-component="sidebar" data-md-type="toc" > <div class="md-sidebar__scrollwrap"> <div class="md-sidebar__inner"> <nav class="md-nav md-nav--secondary" aria-label="Table of contents"> <label class="md-nav__title" for="__toc"> <span class="md-nav__icon md-icon"></span> Table of contents </label> <ul class="md-nav__list" data-md-component="toc" data-md-scrollfix> <li class="md-nav__item"> <a href="#introduction" class="md-nav__link"> Introduction </a> </li> <li class="md-nav__item"> <a href="#what-is-a-vpn" class="md-nav__link"> What is a VPN? </a> </li> <li class="md-nav__item"> <a href="#what-does-a-vpn-do" class="md-nav__link"> What does a VPN do? </a> </li> <li class="md-nav__item"> <a href="#what-this-vpn-doesnt-do" class="md-nav__link"> What this VPN doesn't do </a> </li> <li class="md-nav__item"> <a href="#installing-paloaltovpn" class="md-nav__link"> Installing PaloAltoVPN </a> <nav class="md-nav" aria-label="Installing PaloAltoVPN"> <ul class="md-nav__list"> <li class="md-nav__item"> <a href="#how-to-install-paloaltovpn-when-inside-the-cern-network" class="md-nav__link"> How to install PaloAltoVPN when inside the CERN network </a> </li> <li class="md-nav__item"> <a href="#how-to-install-paloaltovpn-when-outside-the-cern-network" class="md-nav__link"> How to install PaloAltoVPN when outside the CERN network </a> </li> </ul> </nav> </li> <li class="md-nav__item"> <a href="#how-to-connect-to-paloaltovpn" class="md-nav__link"> How to connect to PaloAltoVPN </a> </li> <li class="md-nav__item"> <a href="#mapping-cern-dfs-drives" class="md-nav__link"> Mapping CERN DFS drives </a> </li> </ul> </nav> </div> </div> </div> <div class="md-content" data-md-component="content"> <article class="md-content__inner md-typeset"> <a href="https://gitlab.cern.ch/IT-DEP-CDA-AD/devices-docs/blob/master/docs/pss/PaloAltoVPN.md" title="Edit this page" class="md-content__button md-icon"> <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M20.71 7.04c.39-.39.39-1.04 0-1.41l-2.34-2.34c-.37-.39-1.02-.39-1.41 0l-1.84 1.83 3.75 3.75M3 17.25V21h3.75L17.81 9.93l-3.75-3.75L3 17.25Z"/></svg> </a> <h1 id="paloalto-vpn">PaloAlto VPN</h1> <div class="admonition warning"> <p class="admonition-title">PaloAlto VPN is currently unavailable</p> <p>PaloAlto VPN is not available at the moment, an upgrade is needed for the SSO service that need to be updated to Keycloak 21. This action is foreseen in the autumn of 2024. During this time, if you need a workaround to the use cases fullfilled by the VPN access to CERN resources, please read the recommandations below:</p> </div> <ul> <li>To access CMF to receive monthly patches, package updates and install centrally distributed software, it will be necessary to physically come onsite and connect to the CERN network</li> <li>To access Engineering licence servers, please refer to <a href="https://cern.service-now.com/service-portal?id=kb_article&n=KB0006649">KB0006649</a></li> <li>To access The CERN Windows administration website <a href="https://windows-toolbox.web.cern.ch/">Windows Toolbox</a>, please login first to the <a href="https://cern.service-now.com/service-portal?id=kb_article&n=KB0006557">CERN Terminal Server Service</a> and then open it from your web browser</li> </ul> <hr /> <h2 id="introduction">Introduction</h2> <p>A VPN is available for users that allows centrally managed devices to connect to CERN to access a subset of CERN services whilst not at CERN. It is configured to allow access to some or all of the following resources, depending on your requirements:</p> <ul> <li><a href="https://cmf.web.cern.ch/cmf/">CMF</a> to receive monthly patches, package updates and install centrally distributed software</li> <li>The CERN Windows administration website <a href="https://windows-toolbox.web.cern.ch/">Windows Toolbox</a></li> <li>Engineering license servers</li> </ul> <h2 id="what-is-a-vpn">What is a VPN?</h2> <p>A Virtual Private Network (VPN) is software that makes your computer behave as if it was connected to another network. This is useful for securely accessing a subset of CERN resources which are reserved for devices connected to the CERN network.</p> <h2 id="what-does-a-vpn-do">What does a VPN do?</h2> <p>It identifies when you are connecting to three CERN hosted resources (<a href="https://devices.docs.cern.ch/devices/windows/cmf/">CMF</a>, <a href="https://devices.docs.cern.ch/devices/windows/windowsServices/">Windows Toolbox</a> and DFS) and routes that traffic via CERN. This enables you to access these services as if you were at CERN. This is useful if you have a centrally managed computer/laptop that you use at home since you will be able to e.g. update your device via CMF, access your LAPS password without having to bring it to CERN.</p> <h2 id="what-this-vpn-doesnt-do">What this VPN doesn't do</h2> <p>All other traffic (e.g. accessing other CERN websites, surfing the internet, downloading software from websites other than the CMF website) is not affected, and it will not be routed via CERN. It will not make your computer appear as if it was at CERN to any other websites. Furthermore, the VPN will ONLY work when outside the CERN network i.e. you are not directly connected to the CERN network via WiFi or Ethernet.</p> <div class="admonition warning"> <p class="admonition-title">Warning</p> <ul> <li><strong>ALL DNS TRAFFIC IS ROUTED VIA CERN WHILST USING THE VPN.</strong> This means that e.g. when you navigate to a website in your browser or perform a DNS lookup, the URL is sent to CERN to determine where the traffic should be routed and will be recorded. The VPN is intended for CERN Owned Devices so please make sure to comply with the <a href="https://computingrules.web.cern.ch/">CERN computing rules</a>.</li> </ul> </div> <h2 id="installing-paloaltovpn">Installing PaloAltoVPN</h2> <p><strong>The ability to install and use the the VPN is restricted to a subset of users depending on your requirements, please check with the administrator of your computer if you think you should have access to it.</strong> Once confirmed, please open a SNOW ticket.</p> <h3 id="how-to-install-paloaltovpn-when-inside-the-cern-network">How to install PaloAltoVPN when inside the CERN network</h3> <p>The package can be installed like any other CMF package, for which <a href="https://devices.docs.cern.ch/devices/windows/cmf/users_guide/">detailed instructions can be found here</a>. The package name is PaloAltoVPN.</p> <h3 id="how-to-install-paloaltovpn-when-outside-the-cern-network">How to install PaloAltoVPN when outside the CERN network</h3> <p>The recommended method to install the VPN is via CMF. However, if you are outside the CERN network you will not be able to access CMF in order to install it. Instead, please use the following procedure <strong>AFTER you have been granted access</strong>:</p> <ul> <li>Access <a href="https://vpn.cern.ch/">vpn.cern.ch</a> (note that www.vpn.cern.ch will not work) in your browser and select the 64-bit MSI to trigger the download</li> <li>Once downloaded, open an administrative command prompt by searching for CMD in the start menu, highlighting "Command Prompt" and selecting "Run as administrator"</li> <li>In the CMD prompt that appears copy/paste or type the following command:<ul> <li><code>msiexec /i C:\Users\YOURUSER\Downloads\GlobalProtect64.msi /quiet /l*xv "C:\Windows\Temp\GlobalProtect-install.log" DEFAULTBROWSER=YES PORTAL="vpn.cern.ch"</code></li> </ul> </li> <li>Change the <code>C:\Users\YOURUSER\Downloads\</code> component of the command to reflect the download location of the MSI, typically <code>C:\Users\xxx\Downloads\</code> where <code>xxx</code> is your Windows username</li> <li>Press enter</li> </ul> <p>This will install the application without need for any further interaction.</p> <div class="admonition warning"> <p class="admonition-title">Warning</p> <ul> <li>Make sure to set the package as installed in the CMF webpage once you are able to connect via the VPN to avoid issues. </li> </ul> </div> <p><img alt="" src="../img/VPN_cernch_x64.png" /> <img alt="" src="../img/VPN_CMD_admin_edited.png" /> <img alt="" src="../img/VPN_CMD_admin_command_edited.png" /></p> <h2 id="how-to-connect-to-paloaltovpn">How to connect to PaloAltoVPN</h2> <p>The PaloAltoVPN tray icon appears in the bottom right hand corner.</p> <p><img alt="" src="../img/VPN_access_tray_icon_notconnected.png" /></p> <p>Right clicking the icon will cause the interface to appear.</p> <p><img alt="" src="../img/VPN_access_tray_menu_notconnected.png" /></p> <p>Click connect and the VPN will connect.</p> <p><img alt="" src="../img/VPN_access_tray_menu_connecting.png" /></p> <p><img alt="" src="../img/VPN_access_tray_menu_connected.png" /></p> <p>The tray icon will also indicate that that the VPN is connected.</p> <p><img alt="" src="../img/VPN_access_tray_icon_connected.png" /></p> <p>You will then be able to access <a href="https://cmf.web.cern.ch/cmf/">CMF</a> and <a href="https://windows-toolbox.web.cern.ch/">Windows Toolbox</a>.</p> <h2 id="mapping-cern-dfs-drives">Mapping CERN DFS drives</h2> <p>Please see <a href="https://cern.service-now.com/service-portal?id=kb_article&n=KB0006696">this KB</a> for guidance on how to map CERN DFS drives in order to access DFS files from outside CERN using the VPN.</p> </article> </div> <script>var tabs=__md_get("__tabs");if(Array.isArray(tabs))e:for(var set of document.querySelectorAll(".tabbed-set")){var tab,labels=set.querySelector(".tabbed-labels");for(tab of tabs)for(var label of labels.getElementsByTagName("label"))if(label.innerText.trim()===tab){var input=document.getElementById(label.htmlFor);input.checked=!0;continue e}}</script> </div> </main> <footer class="md-footer"> <nav class="md-footer__inner md-grid" aria-label="Footer" > <a href="../putty/" class="md-footer__link md-footer__link--prev" aria-label="Previous: PuTTY (Windows)" rel="prev"> <div class="md-footer__button md-icon"> <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M20 11v2H8l5.5 5.5-1.42 1.42L4.16 12l7.92-7.92L13.5 5.5 8 11h12Z"/></svg> </div> <div class="md-footer__title"> <div class="md-ellipsis"> <span class="md-footer__direction"> Previous </span> PuTTY (Windows) </div> </div> </a> <a href="../termbot/" class="md-footer__link md-footer__link--next" aria-label="Next: Termbot (Android)" rel="next"> <div class="md-footer__title"> <div class="md-ellipsis"> <span class="md-footer__direction"> Next </span> Termbot (Android) </div> </div> <div class="md-footer__button md-icon"> <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M4 11v2h12l-5.5 5.5 1.42 1.42L19.84 12l-7.92-7.92L10.5 5.5 16 11H4Z"/></svg> </div> </a> </nav> <div class="md-footer-meta md-typeset"> <div class="md-footer-meta__inner md-grid"> <div class="md-copyright"> Made with <a href="https://squidfunk.github.io/mkdocs-material/" target="_blank" rel="noopener"> Material for MkDocs </a> </div> </div> </div> </footer> </div> <div class="md-dialog" data-md-component="dialog"> <div class="md-dialog__inner md-typeset"></div> </div> <script id="__config" type="application/json">{"base": "../..", "features": ["navigation.tabs", "content.tabs.link"], "search": "../../assets/javascripts/workers/search.5bf1dace.min.js", "translations": {"clipboard.copied": "Copied to clipboard", "clipboard.copy": "Copy to clipboard", "search.config.lang": "en", "search.config.pipeline": "trimmer, stopWordFilter", "search.config.separator": "[\\s\\-]+", "search.placeholder": "Search", "search.result.more.one": "1 more on this page", "search.result.more.other": "# more on this page", "search.result.none": "No matching documents", "search.result.one": "1 matching document", "search.result.other": "# matching documents", "search.result.placeholder": "Type to start searching", "search.result.term.missing": "Missing", "select.version.title": "Select version"}}</script> <script src="../../assets/javascripts/bundle.37e9125f.min.js"></script> </body> </html>