How To Use The Global Protect VPN Client
How To Use The Global Protect VPN Client
The Global Protect VPN client, used to connect a Stantec computer to the Stantec network
from a remote location, is always on and does not require the user to initiate the VPN
connection. This document will give an overview of the client, and how to change your network
password.
NOTE: The Global Protect VPN client can only be used on a Stantec computer.
The Global Protect VPN client runs as a system service that is set to automatically start. If you
need to temporarily disable the VPN client, you can put in a request to the ITSC and the ability
to disable the service will be granted for a specific length of time.
The VPN client automatically determines if it is connected to the Internet or the internal
corporate network. The icon in the notification area will indicate what mode it is in:
• A “house” indicates the system is connected to the internal Stantec network and the
VPN client is not connected.
• A “shield” indicates the client detected the system is connected to the Internet and
the VPN is active.
• See the FAQ for more icons and their explanations.
Note: When a system is booted or the connection state changes, there is a 15-35 second delay
while the client attempts to reconnect. You can manually initiate this by clicking on the
notification area icon, clicking on the gear, choosing “Refresh Connection” from the menu, then
clicking “OK” in the warning popup.
The client will automatically try to find the best VPN hub to connect to; the last resort is to
connect to the Edmonton office. If you wish to connect to a specific hub (especially if the office
has files you want to edit), you can do so by clicking on the VPN icon in the notification area,
clicking on the “Gateway” drop-down, and choosing a hub by clicking it in the resulting list:
The VPN connection is always on when the system is connected to the Internet.
There may be specific instances that the VPN client would need to be disabled; for example:
• To connect to a field device to download data, such as survey equipment
You will need to contact the IT Service Center, who will then determine if the request is a one-
time instance or something long term is needed. If the exemption is granted, you will be given a
one-time ticket number and the VPN client will be temporarily disabled until next reboot.
2. You will be presented with a window to enter a ticket number; provide the Request
Number to the ITSC representative:
3. Enter the one-time Ticket number and click OK. The VPN client is now disabled until the
system is rebooted.
When using your laptop outside of Stantec offices, such as in a hotel, in an airport, on an
airplane, etc., you will access the internet using locally provided Wi-Fi, either free or paid. In most
cases, these Wi-Fi connections have a "captive portal", which is a web page that you need to
review and accept before being granted internet access. Below are the steps you'll need to
follow to enable VPN to work through those captive portals.
There is a 15-minute time limit to complete this process when Global Protect first connects to
Wi-Fi; if you do not complete the captive portal process within that time, you will be locked out
from having internet access. To reset the 15-minute time limit, right-click the Global Protect icon,
select Rediscover Network, and proceed through the captive portal steps.
3. After the Wi-Fi is connected, launch Chrome; the browser will open to the captive portal
page.
• If the expected captive portal page does not appear or you see an error message
indicating that the browser can't get to the page, you can force the captive portal
page to appear by going to http://captive.apple.com.
4. Review the content of the page and provide any requested information (e.g., your hotel
room number).
Once the captive portal process has been completed and you have internet access, Global
Protect will establish the VPN connection to the Stantec network.