Windows Installation Instructions

Antivirus required to connect. LLNL provides Symantec Endpoint Protection for employees.
SUPPORT NOTES
  • Do not use these manual installers on LLNL-managed computers; use LANDESK or MacPatch instead.
  • You can have both Cisco AnyConnect and GlobalProtect installed on the same computer.
  • You can use either GlobalProtect or Cisco AnyConnect.
  • CAUTION: DO NOT connect with both Cisco AnyConnect and GlobalProtect at the same time.


Palo Alto Networks GlobalProtect Client

Setup Instructions

NOTE: The appearance and verbiage of the pictures below may change over time as we improve them for clarity/etc.
  1. You need to install this client as Administrator. Navigate to the folder where you saved the downloaded file and run as Administrator. When you open the file the GlobalProtect Client Setup Wizard screen appears.
  2. Run the installer, click "Next", "Next," "Finish" etc. to accept the defaults:



  3. Once the software is installed successfully, the GlobalProtect VPN window should pop up automatically. If not, click the small arrow in your taskbar (lower-right corner of your screen) and click the grey GlobalProtect "Globe" icon. Click install to begin the installation.



  4. In the GlobalProtect window, enter the LLNL VPN portal address: gpvpn.llnl.gov Click ‘Connect.’



  5. To log in, enter your OUN in the Username field and your OTP (PIN + token code) in the Password field.



  6. If your computer connects successfully and you pass the antivirus software enforcement check, you should get a notification letting you know that you connected successfully. The following notification will appear:



  7. If you do not pass the antivirus software enforcement check, you will not be able to reach any LLNL resources and will receive a pop-up window instructing you to remediate your computer and reconnect:



  8. To disconnect the GlobalProtect VPN software, click the "Globe" icon in the system tray, then click the "Disconnect" button.


Cisco AnyConnect

Setup Instructions

  1. You need to install this client as Administrator. Navigate to the folder where you saved the downloaded file, click on the folder to select it, then right click on the folder to reveal the context menu and click "Extract All".



  2. In the window that opens with the path to extract, click on "Extract". Make sure the Show extracted files when complete box is checked.

  3. In the next window that opens, find the Setup.exe file and double click on it.

  4. Click "Yes" on the User Account Control window to install the software. Failure to accept this window will cancel the installation and will need to restart at step 3.

  5. In the windows that opens up, choose Core & VPN and then click "Install Selected".

  6. A window will appear asking to confirm the installation choices, click "OK".

  7. In the next window, click "Accept"

  8. Wait until the install is complete.

  9. Once the install is complete, a window will appear denoting that the install is complete. Click "OK" to close the window.

  10. Click on the Windows Button (1) and then search in the search bar: "Cisco", select "Cisco AnyConnect Secure Mobility Client", then click "Open".

  11. This will open the AnyConnect Client window. If the URL is not filled in, enter: vpn.llnl.gov

  12. Choose the correct group and enter your OUN and OTP (PIN + Token Code)

  13. Once you have successfully launched the Cisco AnyConnect Secure Mobility Client, you will receive the warning banner. You must accept the terms by clicking "Accept" to fully connect.



  14. After some checks are performed, you are connected.

    1. If an error occurs, it is likely that there is no antivirus. SEP is the supported LLNL Antivirus, instructions here: SEP Install

  15. To disconnect from the Cisco AnyConnect Secure Mobility Client click on the AnyConnect icon on your notification area and select disconnect.
  16. To find the client again, look in the toolbar near the time, and the AnyConnect icon will be in the tray.