GlobalProtect VPN Guide (End User)

The following guide is how to set up GlobalProtect VPN or Chatswood VPN.

Setup Microsoft Authenticator for Azure MFA

Before you can use the GP VPN, you need to register a token with Microsoft authenticator. Download the Microsoft Authenticator app on your mobile, it is
free (If you already have this setup you can skip 1-16)

There is a video of the Azure MFA token setup, please view it here: YouTube Video

PLEASE NOTE THIS IS RECOMMENDED TO BE DONE AT THE WORK OFFICE (For MT, HK,SG
Users please do it on the Terminal Server)

1. Log onto https://aka.ms/MFASetup

2. Login with your username and password. Example username: username@mainstreamgroup.com.au
3. It will then prompt and say More Information required, hit next.
4. On Step 1: How should we contact you > change this to Mobile App.
5. Then on How do you want to use the mobile app? > select Receive notifications for verification
6. Then press the Set Up button
7. You will then get a QR code. Open up the Microsoft Authenticator on your mobile phone.
8. Press the ... in the top right hand corner of the app > Add Account
9. Pick, select Work or school account.
10. The camera will activate, scan the QR code on the screen. It should register a token.
11. Back on the computer, press Next (it will then do some setup)
12. Press the Next button again > you will then get a notification on your phone.
13. Press approve.
14. Fill in your mobile number.
15. Select Done.
16. Once you go back to the main screen, you can now close the browser.

Download VPN Client

1. Go to the website https://connectbackup.mainstreamgroup.com/
2. Log in with your email address and network password.
3. As you log in, you will get a notification on your phone from Microsoft Authenticator > press Approve.
4. Once accepted, you will see a page with download links:
a. If you are on Windows download the one that is titled: Download Windows 64 bit GlobalProtect agent
b. If you are on Mac download the one that is titled: Download Mac 32/64 bit GlobalProtect agent

5. Download and relevant application and install it.

6. Follow the Windows or Mac setup depending on your

Windows Setup
1. In the Taskbar you should see a little globe, if not search your computer for a program called "GlobalProtect"
 2. When you run the program, you will see a big Connect button, press Connect.

3. It will ask for a portal address > enter in connectbackup.mainstreamgroup.com. Hit Next,
4. Enter in your email and password again.
5. Check your Phone. You will then get an approval on the Microsoft Authenticator app. Press Approve.
6. Give it around 30 seconds to 1 minute to load.
7. Eventually you will see a Connected icon.

8. You can use Remote Desktop to connect to your PC as per normal.

Connect to your Work PC or Terminal Server

Now that you're connected you will need to remote desktop to your work PC or Terminal Server.

1. Once you have connected you’ll have to open up a remote desktop connection. To do this on a PC, hit the Start button > Search > Remote
Desktop. On a Mac, search Spotlight for the same thing.
a. If you do not have Microsoft Remote Desktop on Mac, please download and install it via this link. https://goo.gl/E35J3t
2. In the connection window, enter in the IP / PC name given to you by the IT department (Windows Key + Ctrl + D to get your Workstation Name) (M
BPOTS02 - Malta, MBPOTS03 - Singapore, MBPOTS04 - Hong Kong)
3. Press Connect, When prompted for a username enter the following details:

PC: Username – mainstreambpo\YourUsername (first initial last name, jsmith)

PW: Your network password you use to log onto the network.

MAC: Username - YourUsername (first initial last name, jsmith)

PW: Your network password you use to log onto the network.
Domain: mainstreambpo.local

Troubleshooting
MAC OSX
GlobalProtect VPN Client always stays on connecting

For Mac OSX users on Sierra you may encounter the following issue with the Global Protect Client stuck on connecting.

This is because Mac OSX has Privacy and Security controls that has blocked the application from running and installing correctly.

You will need to allow the application to run without getting blocked and may need to remove the kernel extensions if it was previously installed incorrectly
with this issue (See Solution B)

1. Uninstall GlobalProtect Client

2. Select Utilities - Terminal
3. Run "sudo spctl --master-disable"
4. Go to System Preferences - Security and Privacy - General - Allow Apps downloaded from - Select Anywhere
5. Apply
6. Restart Mac OSX
7. Boot into Recovery Mode (Hold Command + R Key during POST)
8. Click on Utilities - Open Terminal
9. Run 'run spctl kext-consent add PXPZ95SK77'
10. Restart
11. Install GlobalProtect Client

Windows OS

GlobalProtect VPN Client always suddenly stops connecting or does not pass credentials or MFA Prompt properly
(Clean Install below)
Disable WMI services : run - services.msc - Windows Management Instrumentation(WMI) - stop the service.
Delete the files under C:\Windows\System32\wbem\Repository
Open regedit
Go to HKEY_LOCAL_MACHINE > Software and HKEY_CURRENT_USER > Software. Delete the Palo Alto Networks folder.
Delete the same if the same folder is present in any other user under HKEY_USERS.
Un-install GlobalProtect from Windows 'program and features'.
Make sure that the virtual adapter in not present in the Network adapter settings.
Reboot the machine.
Reinstall GlobalProtect with admin privileges.
Confirm that WMI service is running.