macOS Installation Instructions

Antivirus required to connect. LLNL provides Symantec Endpoint Protection for employees.
SUPPORT NOTES
  • Do not use these manual installers on LLNL-managed computers; use LANDESK or MacPatch instead.
  • You can have both Cisco AnyConnect and GlobalProtect installed on the same computer.
  • You can use either GlobalProtect or Cisco AnyConnect.
  • CAUTION: DO NOT connect with both Cisco AnyConnect and GlobalProtect at the same time.


Palo Alto Networks GlobalProtect Client

NOTE: The appearance and verbiage of the pictures below may change over time as we improve them for clarity/etc.
  1. You need to install this client as Administrator. Navigate to the folder where you saved the file and run as Administrator.
  2. Double-click on Mac software installation package (e.g., GlobalProtect-5.1.1.pkg).
  3. Click the "Continue" button.
    Mac Install Instructions
  4. Click "Continue" button.
    Mac Install Instructions
  5. Click the "Install" button.
    Mac Install Instructions
  6. Enter your computer credentials when prompted.
  7. Click the "Open Security Preferences" button.
    Mac Install Instructions
  8. Click the "Allow" button.
    Mac Install Instructions
  9. Make sure "Palo Alto Networks" box is checked and press the "OK" button.
    1. Depending upon your configuration you may get a window that indicates that you need to restart your computer. Click "OK" and continue with the installation
    2. Mac Install Instructions

  10. For macOS 10.15 only - Click the "Privacy" tab.
    1. Select "Full Disk Access" from the list on the left.
      1. If needed, click the padlock icon to unlock the pane.
    2. Click the plus sign (+) button.
    3. Browse to and select /Applications/GlobalProtect.app.
    4. If prompted to quit GlobalProtect, choose "Later".
      Mac Install Instructions
      Mac Install Instructions
  11. Click the "Close" button.
    Mac Install Instructions
  12. The "GlobalProtect" window (pictured below) may appear and disappear. We will come back to it later.
    1. Restart your computer.
      Mac Install Instructions
  13. To use the software, click the "Globe icon" in the menu bar.

    Mac Install Instructions


  14. In the GlobalProtect window, enter the LLNL VPN portal address: gpvpn.llnl.gov
    1. Click "Connect".
      Mac Install Instructions
  15. To log in, enter your OUN in the "Username" field and your OTP (PIN + token code) in the "Password" field.
    Mac Install Instructions
  16. If your computer connects successfully and you pass the antivirus software enforcement check, you should get a notification letting you know that you connected successfully. The following notification will appear:

    Mac Install Instructions

  17. If you do not pass the antivirus software enforcement check, you will not be able to reach any LLNL resources and will receive a pop-up window instructing you to remediate your computer and reconnect:

    Mac Install Instructions

  18. To disconnect the GlobalProtect VPN software, click the "Globe icon" in the Finder menu bar and click the "Disconnect" button.



Cisco AnyConnect

  1. You need to install this client as Administrator. Navigate to the folder where you saved the file and run as Administrator.

    Mac Install Instructions

  2. A window appears displaying the Introduction, click Continue.

    Mac Install Instructions

  3. The Software License Agreement window opens, click "Continue".

    Mac Install Instructions

  4. Then an agreement text opens, click "Agree".
    Mac Install Instructions
  5. The only package required is "VPN". The "Diagnostics And Reporting Tool" is optional, but will help support should you require assistance. You may deselect all other options.

  6. Click Continue on the Custom Install on "Macintosh HD" screen after you have selected the packages you wish to install.

    Mac Install Instructions

  7. You may select a different destination to save the client software prior to installation. Clicking Install will install the applications selected.

    Mac Install Instructions

  8. When installation is complete you will see this screen. Click "Close" to exit installation process.

    Mac Install Instructions

  9. The installer gives you the option to move to trash or keep, choose whichever you like. Mac Install Instructions
  10. To open the Cisco AnyConnect Client, click Hard Drive, Applications, Cisco, Cisco AnyConnect Secure Mobility Client.

    Once you have successfully launched the Cisco AnyConnect Secure Mobility Client, you will receive this window. Type vpn.llnl.gov into the "Connect to:" window and click "Connect".

    Mac Install Instructions

  11. Select the appropriate group and enter your OUN and OTP (PIN + Token Code) and click "Connect".

    Mac Install Instructions

  12. Enter your OUN and OTP (PIN + Token Code) and click "OK".

    Mac Install Instructions

  13. The DOE Warning Banner displays, click "Accept" to proceed.

    Mac Install Instructions

  14. Once you have successfully launched the Cisco AnyConnect Secure Mobility Client, you will receive this window. Click Accept to proceed. Now you are ready to use the browser to access LLNL.

    Mac Install Instructions