Multiple GlobalProtect Login Windows

Users of the UC Berkeley bSecure remote access service using GlobalProtect are prompted with multiple CalNet windows. The first time the user experiences an additional request to approve GlobalProtect.  If steps are not taken the user will continue to be prompted for permission.

What is Happening?

Users see two windows because GlobalProtect is actually logging into the service twice. The first time is to authorize the user and provide the GlobalProtect configuration, the second time is to start the VPN session. If a user changes tunnels (from Split to Library-Full for example).The window will contain something similar to the following image.

If GlobalProtect does not finish connecting, you may be required to click on the click here link in the text window. This will tell your computer to finish the connection process.

When the browser tries to open GlobalProtect the operating system (Windows, MacOS, etc) will warn you that the browser is opening an application. This can be confusing, but if you click the small checkbox next to "Always allow" then you won't be prompted again for that window. Below are examples of the popup from Windows and MacOS.

This window will have to be clicked once for each VPN site a user visits.  So they will need to do it at least twice, once for vpn.berkeley.edu, and once for campus-split.vpn.berkeley.edu. But if the user changes tunnels then they will be prompted once more for the new site, but only that once.