To access campus resources (department shared folders, MySBfiles folder, PeopleSoft Administrative system, privileged SOLAR access, for example) from off campus, you must use Stony Brook's VPN. Stony Brook University uses GlobalProtect VPN. 

Overview: Using the Stony Brook VPN on a Mac

1. Request access to use the VPN: Submit a service ticket.
   • The VPN requires 2-step authentication via Duo Security.  
   • New Duo Security users will receive an email explaining how to enroll their devices with a special link to enroll their first device.
     • Keep your device handy every time you want to log into the VPN.
     • Be sure to enroll at least 2 devices (for example, mobile and landline or mobile and tablet).
     • Enroll subsequent devices or change the default device in the Duo Self-Service Portal.
2. Download and install: Once you have received confirmation that you've been granted access to the VPN and you have enrolled devices into Duo Security, you can download and install the VPN (instructions below).
   • You will need administrator access to install the software.
   • Note: When you sign in to download the VPN software AND when you set up the installation on your computer, you'll be prompted each time to approve the login on your default Duo-enrolled device, so have it handy.  
3. Connect to the VPN: Once GlobalProtect is downloaded and installed, follow the Connecting directions
   • Connecting will require authentication from DUO Security, so keep your default Duo-enrolled device handy for every reconnection to the VPN. 
4. Disconnect from the VPN: After each session, disconnect.

2. Downloading and Installing the Stony Brook VPN (first-time access)

The first time you use VPN, follow these steps to download and install

1. Be sure you have access to the VPN and Duo and have your default device that is registered with DUO Security handy
2. Go to https://vpn.stonybrook.edu/ (from an off campus network or by using WolfieGuest) and enter your NetID and NetID password in the Stony Brook VPN portal page; then click Log In
   
3. Authenticate with DUO: Check your default device that is registered with DUO Security to approve authentication into the VPN. If you've set up to authenticate by receiving a phone call, have that phone handy, pick it up when it rings, and press any key on the number pad to complete authentication (https://guide.duo.com/other-phones)
   
4. Download and install:
   1. Select Download Mac 32/64 bit GlobalProtect agent to download. If prompted to run or save the software, click Run. 
      
   2. If prompted, click Run, to launch the GlobalProtect Setup Wizard. Otherwise, double-click on the GlobalProtect.pkg file (located in Downloads) to launch the wizard.
   3. From the GlobalProtect Installer Welcome, click Continue
       
   4. For Package Name, select GlobalProtect and click
      Continue
       
   5. Follow the prompts in the installer, and, if prompted, enter your computer's admin username and password to allow the installation to start and click Install Software
      
   6. The installation is complete when "The installation was successful" message displays and the GlobalProtect Home tab settings open.
      
5. To connect to the VPN, follow the instructions for Connecting to the VPN