How to Install and Log In To Global Protect

Global Protect is a VPN agent to be used on CTL managed computers while working remotely. Follow the steps below to set up Global Protect for first-time use.

1. If you haven’t already done so, set Up Microsoft Authenticator on your mobile device following the instructions linked below. Microsoft Authenticator is required to log into Global Protect. https://mfa.centurylink.com/Documents/Microsoft%20Office/Microsoft%20Authenticator%20to%20Access%20O365.docx.

2. Request Access to VPN Authorization group (US and non-USA based employees)

• For International users, submit the International Remote Access Request located within the link. Please note that this form is to be used by international employees and their managers. After you have registered Microsoft Authenticator on your phone, and have VPN access approved, you can set up Global Protect if needed and login.

• For US based users, submit the Remote Access Request for US based Users form.

You can browse to these forms from the My Support Desk portal as follows:

https://mysupportdesk.service-now.com/msd/ Technology Services >Security Operations > Enterprise Multifactor Token and VPN Requests

ROC-NG (GlobalProtect): Register for MS MFA and select Microsoft Authenticator with VPN.

Installing Global Protect

In your browser, go to https://roc.centurylink.com

• Select your account or Use another account and enter your work email address.

• Proceed to enter Domain password and select sign in.

• After you authenticate using your email address and domain password, approve the authentication request on your phone (depends on how token was setup)

• Click 64Bit Client OR Mac Client if using a Mac. Click Run.

•Click Next

•Click Next again.

•Click Next again

•You’ll see this screen.

•Once the install is complete, click Close.

•Next you will be prompted for the portal address, enter the appropriate portal address below based on your location. Then click Connect.

CTL North America Employee Portal: roc.centurylink.com

fLVL3 North America Employee Portal: roc-portal-idc2.centurylink.com

fLVL3 EMEA Employee Portal: roc-emea.centurylink.com

CTL APAC Employee Portal: roc-apac.centurylink.com

CTL LATAM Employee Portal: roc-latam.centurylink.com

•To login after installation, use your email address and CenturyLink password.

Once that authentication passes, you will be prompted with a request on your Microsoft Authenticator app to approve or enter token the authentication request on your phone (depends on how token is setup)•

You will see the two banners below. The first one is the portal. This banner will inform you to allow for posture checks to take place. The second banner informs you when you are connected to the gateway. If your computer does not pass posture assessments, the second banner will inform you of that with (RED LETTERING).

•The next time you log into GlobalProtect, simply click on the Global Protect icon located on your task bar or Start menu and log in as described above.

Troubleshooting

•Sometimes, the FIRST login might take some time to gather all the HIP information, if you login and cannot access anything on the network, please try to “Refresh Connection” for Global Protect found in your taskbar near your clock.

•If you receive “Authentication failed” and you are fairly certain everything was correct, please use the

“GlobalProtect Reset” icon located on your desktop. Wait a few seconds after the reset and please attempt to re-authenticate again when prompted to do so. You may also go into the settings

menu of Global protect and make sure your account is signed out and retest.

If this does not resolve your issue, please attempt a reboot of the system entirely.