How do I install Palo Alto GlobalProtect on my device?

Mac 10.9 Instructions
Windows Instructions

These are some of the most frequently asked questions about VPN. See if these questions and answers resolve your questions. If not, please call the myIT Service Desk at (402) 280-1111.

What is a VPN?

A Virtual Private Network (VPN) is used to provide secure, encrypted communication between a network and a remote host or other remote networks over the public Internet. VPNs allow the establishment of an encrypted “tunnel” that protects the flow of network traffic from eavesdroppers.

Do I need a VPN?

If you connect to systems or services only available internally to the Creighton network, then yes.  The VPN ensures that confidentiality and integrity of information as it travels over the public Internet because VPN provides:

  • User Authentication and Authorization for network access
  • Encrypted transmission of data
  • Verification of unadulterated data transmission

What is the GlobalProtect VPN Client?

GlobalProtect is the name of Creighton’s VPN access method.  When you go to launch the VPN, you will need to launch the GlobalProtect program.

How does VPN work?

A VPN consists of two components: a software client on the remote computer and a concentrator. The software client allows a user to establish an encrypted “tunnel” with the concentrator. This tunnel prevents other users on the Internet from being able to easily view the encrypted data.

What do I need to do to begin using VPN?

You will need to do these things to begin using Creighton’s VPN:

  • Creighton issued VPN client software.

    VPN software can be downloaded to your computer, but you must be off-campus before you can reach this website.

  • NetID and BLUE password of a current student, faculty, staff, or registered guest account.

    All active members of the Creighton community have an NetID and BLUE password. Check this page for more information on NetIDs and BLUE passwords

  • Following installation of the Palo Alto GlobalProtect, launch the program and type this server address into the blank field: blue-vpn.creighton.edu then click Connect.

  • When prompted, type your NetID (ex. abc12345) and Blue password, and complete the connection dialog.

  • To disconnect, right-click on the Palo Alto GlobalProtect client, then select Disconnect.

What operating systems do you have VPN clients available for?

The Creighton VPN client is currently available for all Windows Vista, 7, 8, 8.1, 10 and Macintosh OS X 10.5 - 10.10 operating systems, however IT does not provide VPN technical support for issues with home systems.

I already have a VPN client on my PC; can I use the Creighton VPN client as well?

While it may be technically possible to install and use multiple VPN client on a single PC, IT does not recommend doing so. VPN clients interact with an operating system’s network components, and can conflict with one another if multiple brands are installed. By default, Palo Alto’s GlobalProtect VPN client (the client used by Creighton) will uninstall any other VPN client that is installed on the PC prior to installing itself.

I can’t get the client because I have no network access, what do I do?

If you cannot connect to https://blue-vpn.creighton.edu, then you cannot utilize the VPN service.  You can wait until you have network connection from off-campus, or you can bring your computer to the service desk and they can assist you in downloading and installing the VPN client.  (Wired connections only)

What types of Internet connections work with VPN?

VPN should work with:

  • DSL (Digital Subscriber Line)
  • Cable Modem
  • Satellite
  • ISDN (Integrated Services Digital Network)
  • Dial-Up ISP

Although VPN will work over dial-up access, due to added overhead of encryption, performance of the VPN over dial-up is degraded. Creighton highly recommends the use of broadband access for VPN connectivity.

What is the difference between VPN and SSL or SSH?

SSL and SSH provide an end-to-end encrypted connection, whereas the VPN connection is only encrypted between the remote computer and the VPN concentrator. Between the VPN concentrator and the final destination, the traffic is sent in its original form (which may or may not be encrypted, depending on what protocols you are using). You can still use SSL or SSH over the VPN connection.

What kind of VPN server do we use?

Creighton is running Palo Alto GlobalProtect.  The VPN client implements split-tunneling, which means that traffic destined for campus will traverse the encrypted VPN connection while other network traffic will go directly to the internet without going through Creighton's network.