Getting Started: Downloading, Installing and Connecting to the Stony Brook VPN on a Mac

Audience: Faculty, Researchers, Staff, Students and Teaching Assistants

This KB Article References: VPN
This Information is Intended for: Faculty, Researchers, Staff, Students, Teaching Assistants
Last Updated: August 18, 2017

To access campus resources (department shared folders, MySBfiles folder, PeopleSoft Administrative system, privileged SOLAR access, for example) from off campus, you must use the Stony Brook's VPN.  Stony Brook University uses GlobalProtect VPN. 

Overview:  Using the Stony Brook VPN on a Mac

  1. Request access to use the VPN by submitting a service ticket.
    • The VPN requires 2-step authentication:  Duo Security.  
    • New Duo users will receive an email explaining how to enroll their devices with a special link to enroll their first device.
      • Keep your device handy everytime you want to log into the VPN.
      • Be sure to enroll at least 2 devices (for example, mobile and landline or mobile and tablet).
      • Enroll subsequent devices or change the default device in the Duo Self-Service Portal.
  2. Once you have received confirmation that you've been granted access to the VPN and you have enrolled devices into Duo Security, you can download and install the VPN (instructions below).
    • You will need administrator access to install the software.
    • Note:  When you sign in to download the VPN software AND when you set up the installation on your computer, you'll be prompted each time to approve the login on your default Duo-enrolled device.  
  3. Reconnecting to the VPN: For subsequent connections, follow the Reconnecing directions, which do not require re-installing the client.  
    • Reconnecting will require authentication from DUO Security, so keep your phone or tablet handy for every reconnection to the VPN. 
  4. Disconnect: After each session, disconnect.

I.  Downloading and Installing the Stony Brook VPN (first-time access)

The first time you use VPN, follow these steps to download, install, and connect.

  1. Once you have received access to the VPN and Duo, visit (from an off campus network or by using WolfieGuest).
  2. Enter your NetID and NetID password in the Stony Brook VPN portal page
  3. Since Stony Brook's VPN requires 2-step login, check your default device that is registered with DUO Security to approve authentication into the VPN.  If you've set up to authenticate by receiving a phone call, have that phone handy, pick up when it rings and press any key on the number pad to complete authentication.
    duo mobile app with approve and deny options
  4. Download and install:
    1. Select Download Mac 32/64 bit GlobalProtect agent to download. If prompted to run or save the software, click Run
    2. If prompted, click Run, to launch the GlobalProtect Setup Wizard. Otherwise, double-click on the GlobalProtect.pkg file (located in Downloads) to launch the wizard.
    3. From the GlobalProtect Installer Welcome, click Continue
       Installer welcome
    4. For Package Name, select GlobalProtect and click
       Custom Install with GlobalProtect selected
    5. Follow the prompts in the installer, and, if prompted, enter your computer's admin username and password to allow the installation to start and click Install Software
      computer admin login in permission to install
    6. The installation is complete when "The installation was successful" message displays and the GlobalProtect Home tab settings open.
  5. Sign in, authenticate, and connect using one of these methods:
    1. To authenticate via DUO push on your mobile device's DUO Security app,
      1. Complete the settings as follows, and then click Connect

        Username: NetID  
        Password: NetID password
  6. Approve 2-step login again.
    duo mobile app with approve and deny options
  7. Once installed and connected, the Connected GlobalProtect icon globalprotect icon showing currently connected will appear in the menu bar at the top of the screen. Hold your mouse over the icon and Connected will display icon showing connected. The status will also show Connected:



If the GlobalProtect icon doesn't appear in the menu bar:

Check that GlobalProtect has been downloaded and installed:

  1. Open Finder and Select Applications
    Globalprotect in finder applications
  2. Search for GlobalProtect. If it isn't in Applications, download and install it again
  3. If GlobalProtect is in applications, while viewing Finder, check the menu bar again for the GlobalProtect icon, globalprotect icon showing not currently connected or globalprotect icon showing currently connected
    Globalprotect in menu bar while viewing finder

NOTE:  Do not follow these instructions again unless you uninstalled the VPN (Global Connect Agent) and need to reinstall it.  

To connect again, follow the instructions for Reconnecting to the VPN.

To disconnect follow these instructions: Disconnecting the Stony Brook VPN on a Windows computer.

Getting Help

The Division of Information Technology provides support on all of our services. If you require assistance please submit a support ticket through the IT Service Management system.

Submit A Ticket

Supported By

Customer Engagement and Support