Getting Started: Downloading, Installing and Connecting to Stony Brook's VPN for Windows

Audience: Faculty, Researchers and Staff

This KB Article References: VPN
This Information is Intended for: Faculty, Researchers, Staff
Last Updated: August 18, 2017

To access campus resources (department shared folders, MySBfiles folder, PeopleSoft Administrative system, privileged SOLAR access, for example) from off campus, you must use the Stony Brook's VPN.  Stony Brook University uses GlobalProtect VPN. 

Overview:  Using the Stony Brook VPN on a Windows Machine

  1. Request access to use the VPN by submitting a service ticket.
    • The VPN requires 2-step authentication:  Duo Security.
    • New Duo Security users will receive an email explaining how to enroll their devices with a special link to enroll their first device.
      • Keep your device handy everytime you want to log into the VPN.
      • Be sure to enroll at least 2 devices (for example, mobile and landline or mobile and tablet).
      • Enroll subsequent devices or change the default device in the Duo Self-Service Portal.
  2. Once you have received confirmation that you've been granted access to the VPN and you have enrolled devices into Duo Security, you can download and install the VPN (instructions below).  
    • You will need administrator access to install the software on your computer. 
    • Note:  When you sign in to download the VPN software AND when you set up the installation on your computer, you'll be prompted each time to approve the login on your default Duo-enrolled device.  
  3. Reconnecting to the VPN: For subsequent connections, follow the Reconnecting directions, which do not require re-installing the client. 
    • Reconnecting will require authentication from DUO Security, so keep your phone or tablet handy for every reconnection to the VPN. 
  4. Disconnect after each session.

I. Downloading the Stony Brook VPN (first-time access)

  1. Once you have received access to the VPN and Duo, visit (from an off campus network or by using WolfieGuest).
  2. Enter your NetID and NetID password in the Stony Brook VPN portal page:
  3. Since Stony Brook's VPN requires 2-step login, check your default device that is registered with DUO Security approve authentication into the VPN.  If you've set up to authenticate by receiving a phone call, have that phone handy, pick up when it rings and press any key on the number pad to complete authentication.
  4. Choose the appropriate download for your system: Windows 32 bit or Windows 64 bit operating system (Is my PC running the 32-bit or 64-bit version of Windows? or Mac)
  5. Run the GlobalProtect.msi program depending on your browser. (Not sure what browser you are using?
    1. Chrome 
      1. Save the file to your Downloads folder and then click the box that appears at the bottom of your screen (not the down-pointing arrow)
      2. Next you will be prompted to Run this file:
    2. Internet Explorer
      1. Click Run at the dialogue box that appears at the bottom of your screen.
    3. FireFox
      1. Click Save File at the prompt (the button will be grayed out momentarily until it is ready for you to save):
      2. Then click the downloads arrow    at the top of your screen and click GlobalProtect**.msi to run it.

II. Install the GlobalProtect Agent

  1. The GlobalProtect Setup Wizard will appear to help install the program. Click Next to begin.
  2. By default the application will be available in Program Files. Click Next:
  3. Confirm the installation by clicking Next:
  4. The program in will install, click Next when it is finished.
  5. Click Yes to give your permission in the User Account Control dialogue box.

    **If nothing is happening, your computer may ask your permission to run the program. Click on the shield in your taskbar.  
  6. Close the Installation Complete window:
  7. Next you will be prompted to enter the correct portal, username, and password. Click Connect when finished.
  8. Approve 2-step login again.
  9. Momentarily, the GlobalProtect status will change to Connected:

    *Give this a few moments to connect.  It may look like nothing is happening at first, but be patient.
    You will also see confirmation in your system tray that the VPN has connected:
    Another view of connection:

System Tray icons:

An earth icon with a shield means you are connected
An earth icon with an "x" means you are disconnected 

NOTE:  Do not follow these instructions again unless you uninstalled the VPN (Global Connect Agent) and need to reinstall it.  

To connect again, follow the instructions for Reconnecting to the VPN.

To disconnect follow these instructions: Disconnecting the Stony Brook VPN on a Windows computer

Getting Help

The Division of Information Technology provides support on all of our services. If you require assistance please submit a support ticket through the IT Service Management system.

Submit A Ticket

Supported By

Customer Engagement and Support