Add SSL/TLS VPN
 

To Add a new SSL/TLS VPN, click on “Create VPN” or click on the “+” sign at the top-right corner. You can now choose the Reservation, Users, and Gateway for your VPN and click on “Save”. 

 

 

 

 

 

 

*Notes:

1. Usernames must not contain any spaces or special characters.
2. Once you click on “Save”, it takes 15 minutes until your VPN is created and ready for use.
3. if you change your password, it might take a few minutes to reflect, you will see the progress in “Status”.

 

Once your VPN has been created, you can now View your VPNs and download Global Protect Client from the top-right corner when you click on “Available here”. Once it’s been downloaded and installed, open GlobalProtect Client from the taskbar.

 

 

 

 

Now click on the sign at the top-right corner, then click on “Settings”.

 

 

 

Now click on the “+”  sign and insert your Public IP Address (you can find it under your VPN) then click on “Add”.

 

 

After you add your public IP address, click on ”Connect” then you will see a “Show Certificate” Option, click on it and it will open the certificate installation window, click on “Install Certificate”, then click “Yes”.

 

 

 

 

Choose “Current User”, then click on “Next”. Choose “Place all certificates in the following store”, then click on “Browse”.

 

 

 

After clicking on “Browse”, choose “Trusted Root Certification Authorities” then click on “OK”, then “Next” then “Finish” and now click on “Yes”, then “OK“

 

 

After installing the certificate, go to GlobalProtect and enter your Username and Password (which you created when you created your VPN) then click on “Connect”. You should now be connected successfully.

 

 

 

Another way to set up your certificate is to click on the sign at the top-right corner, then choose “Export Certificate” , this will download your certificate to your local machine.

 

 

Open your certificate, and then click on “Open” to bypass the security warning , then click on “Install Certificate”, choose “Local Machine” then click “Next” , it will ask you for Administrative access so click on “Allow” and then proceed with the rest of the steps just like the previous process.