LLNL Remote Access

macOS Installation Instructions

Antivirus required to connect. Please click here for details.

SUPPORT NOTES

Do not use these manual installers on LLNL-managed computers; use LANDESK or MacPatch instead.
You can have both Cisco AnyConnect and GlobalProtect installed on the same computer.
You can use either GlobalProtect or Cisco AnyConnect.
CAUTION: DO NOT connect with both Cisco AnyConnect and GlobalProtect at the same time.

GlobalProtect

AnyConnect

Palo Alto Networks GlobalProtect Client

NOTE: The appearance and verbiage of the pictures below may change over time as we improve them for clarity/etc.

You need to install this client as Administrator. Navigate to the folder where you saved the file and run as Administrator.
Double-click on Mac software installation package (e.g., GlobalProtect-5.1.1.pkg).
Click the "Continue" button.
Click "Continue" button.
Click the "Install" button.
Enter your computer credentials when prompted.
Click the "Open Security Preferences" button.
Click the "Allow" button.
Make sure "Palo Alto Networks" box is checked and press the "OK" button.
1. Depending upon your configuration you may get a window that indicates that you need to restart your computer. Click "OK" and continue with the installation
For macOS 10.15 only - Click the "Privacy" tab.
1. Select "Full Disk Access" from the list on the left.
2. Click the plus sign (+) button.
3. Browse to and select /Applications/GlobalProtect.app.
4. If prompted to quit GlobalProtect, choose "Later".
Click the "Close" button.
The "GlobalProtect" window (pictured below) may appear and disappear. We will come back to it later.
1. Restart your computer.
To use the software, click the "Globe icon" in the menu bar.

In the GlobalProtect window, enter the LLNL VPN portal address: gpvpn.llnl.gov
1. Click "Connect".
To log in, enter your OUN in the "Username" field and your OTP (PIN + token code) in the "Password" field.
If your computer connects successfully and you pass the antivirus software enforcement check, you should get a notification letting you know that you connected successfully. The following notification will appear:
If you do not pass the antivirus software enforcement check, you will not be able to reach any LLNL resources and will receive a pop-up window instructing you to remediate your computer and reconnect:
To disconnect the GlobalProtect VPN software, click the "Globe icon" in the Finder menu bar and click the "Disconnect" button.

Cisco AnyConnect

You need to install this client as Administrator. Navigate to the folder where you saved the file and run as Administrator.
A window appears displaying the Introduction, click Continue.
The Software License Agreement window opens, click "Continue".
Then an agreement text opens, click "Agree".
The only package required is "VPN". The "Diagnostics And Reporting Tool" is optional, but will help support should you require assistance. You may deselect all other options.
Click Continue on the Custom Install on "Macintosh HD" screen after you have selected the packages you wish to install.
You may select a different destination to save the client software prior to installation. Clicking Install will install the applications selected.
When installation is complete you will see this screen. Click "Close" to exit installation process.
The installer gives you the option to move to trash or keep, choose whichever you like.
To open the Cisco AnyConnect Client, click Hard Drive, Applications, Cisco, Cisco AnyConnect Secure Mobility Client.

Once you have successfully launched the Cisco AnyConnect Secure Mobility Client, you will receive this window. Type vpn.llnl.gov into the "Connect to:" window and click "Connect".
Select the appropriate group and enter your OUN and OTP (PIN + Token Code) and click "Connect".
Enter your OUN and OTP (PIN + Token Code) and click "OK".
The DOE Warning Banner displays, click "Accept" to proceed.
Once you have successfully launched the Cisco AnyConnect Secure Mobility Client, you will receive this window. Click Accept to proceed. Now you are ready to use the browser to access LLNL.