Download and Install the GlobalProtect App for Windows
Focus
Focus
GlobalProtect

Download and Install the GlobalProtect App for Windows

Table of Contents

Download and Install the GlobalProtect App for Windows

Before connecting to the GlobalProtect network, you must download and install the GlobalProtect app on your Windows endpoint. To ensure that you get the right app for your organization’s GlobalProtect or Prisma Access deployment, you must download the app directly from a GlobalProtect portal within your organization. For this reason, there is no direct GP app download link available on the Palo Alto Networks site.
To download and install the app, you must obtain the IP address or fully qualified domain name (FQDN) of the GlobalProtect portal from the administrator. In addition, your administrator should verify which username and password information you can use to connect to the portal and gateways. In most instances, the username and password, is the same username and password that you use to connect to your corporate network. After you gather the required information, use the following steps to download and install the app:
To run GlobalProtect app 5.0 and above, Windows endpoints require Visual C++ Redistributables 12.0.3 for Visual Studio 2013. If you have not already installed any redistributable packages on your endpoint, the GlobalProtect app installs Visual C++ Redistributables 12.0.3 automatically. If you have already installed Visual C++ Redistributables 12.0.2 or an earlier release, you must either uninstall the existing redistributable packages from your endpoint or upgrade to Visual C++ Redistributables 12.0.3 prior to installing the GlobalProtect app.
  1. Log in to the GlobalProtect portal.
    1. Launch a web browser and go to the following URL:
      https://<portal IP address or FQDN>
      Example: http://gp.acme.com
    2. On the portal login page, enter your Name (username) and Password, and then click LOG IN. In most instances, you can use the same username and password that you use to connect to your corporate network.
  2. Navigate to the app download page.
    In most instances, the app download page appears immediately after you log in to the portal. Use this page to download the latest app software package.
    If your system administrator has enabled GlobalProtect Clientless VPN access, the applications page opens after you log in to the portal (instead of the app download page). Select GlobalProtect Agent to open the download page.
  3. Download the app.
    1. To begin the download, click the software link that corresponds to the operating system running on your computer. If you are not sure whether the operating system is 32-bit or 64-bit, ask your system administrator before you proceed.
    2. Open the software installation file.
    3. When prompted, Run the software.
    4. When prompted again, Run the GlobalProtect Setup Wizard.
  4. Complete the GlobalProtect app setup.
    1. In the GlobalProtect Setup Wizard, click Next.
    2. Click Next to accept the default installation folder (C:\Program Files\Palo Alto Networks\GlobalProtect) and then click Next twice.
      Although you can Browse to select a different location in which to install the GlobalProtect app, the best practice is to install it in the default location. The default installation location is read-only for non-privileged users and therefore installing to this location protects against malicious access to the app.
    3. After installation is complete, Close the wizard.
  5. Log in to GlobalProtect.
    1. Launch the GlobalProtect app by clicking the system tray icon. The status panel opens.
    2. Enter the FQDN or IP address of the portal that your GlobalProtect administrator provided, and then click Connect.
    3. ( Optional) By default, you are automatically connected to the Best Available gateway, based on the configuration that the administrator defines and the response times of the available gateways. To connect to a different gateway, select the gateway from the Gateway drop-down (for external gateways only).
      This option is only available if your administrator enables manual gateway selection.
    4. ( Optional) Depending on the connection mode, click Connect to initiate the connection.
    5. ( Optional) If prompted, enter your Username and Password, and then click Sign In.
      If your administrator has allowed you to use biometric (fingerprint) information to sign in, you need to first sign-in with a username and password twice (once to save it and again to authenticate); you can then use biometric information to sign in.
      If authentication is successful, you are connected to your corporate network, and the status panel displays the Connected or Connected - Internal status. If your administrator sets up a GlobalProtect welcome page, it displays after you log in successfully.