What are the different portals used for?
Portals provide GlobalProtect with configuration, notices, and software updates. After login the portal provides the GlobalProtect client with a list of available VPN gateways (see KB0012522 for information on the gateways) available to the portal user. The portal also shares the login approval with the chosen gateway so users do not have to login multiple times while starting the connection.
At this time there are three portals:
vpn.berkeley.edu
The primary portal, which is detailed in the installation instructions, is called vpn.berkeley.edu. This portal provides a manual remote access service with three options for connectivity. Users of this portal can start and stop the remote access VPN session as needed and will not be prompted to start it when their device turns on.
Notice: On December 21st this portal will change to allow a more efficient communications method to help improve performance of the VPN system.
ssl.vpn.berkeley.edu
An alternative portal is called ssl.vpn.berkeley.edu. This portal provides the same user experience as the primary portal but restricts users to the same communications methods in use when the bSecure Remote Access Service was first released. Most users will not need to use this portal, but in some rare cases GlobalProtect is unable to select an appropriate method for connection. In those cases this portal will force the system to use the less efficient method to ensure compatibility.
auto.vpn.berkeley.edu
A second alternative portal exists for users to streamline their usage or to meet specific needs called auto.vpn.berkeley.edu. The auto portal operates asks the user if they want to connect when they start their computer. Users are not required to use the VPN, the prompt is intended to aid in connecting quickly and with a minimum of interaction with GlobalProtect. The auto portal, once authenticated, provides the device Campus network addresses and routes all traffic through GlobalProtect. This means your device will act as though it is at the UC Berkeley campus with the access you would normally expect from Campus. The connection method is called Library and Full Tunnel when using the other portals.
Users should consider using the auto.vpn.berkeley.edu portal to meet the following needs:
- Users of screen readers are provided a streamlined method of using the bSecure Remote Access Service
- Users of devices that are primarily active on the campus network and will keep the tunnel at most times
Users wishing to make use of the auto or ssl portals should configure the appropriate name as the portal name in place of vpn.berkeley.edu, all other settings are taken care of by the bSecure system once a user has successfully connected for the first time.