As of October 2025, BRCC's remote access Virtual Private Network (VPN) system is Palo Alto's Global Protect VPN client. This replaces the previous Cisco AnyConnect VPN software.


The VPN system provides access to technology resources that are normally only accessible from an employee computer on campus including:

  • Colleague UI
  • Informer reporting system
  • Cisco Jabber - remote access to office telephone
  • remote access to employee computers on campus


Starting in October 2025, the Global Protect VPN software should be automatically installed onto all employee laptops and employee loaner computers.


Employees should only use the VPN with a College-issued computer such as their assigned laptop computer or an employee loaner computer. The VPN software works on both Windows and Mac OS computers. 


Important note - Certification Requirement:

In addition to the normal username, password and MFA authentication, this new VPN also requires that a special type of file called a 'certificate' is installed on the computer that is attempting to connect to the VPN. This certificate is automatically deployed to every employee's primary assigned computer workstation. However, if you have more than one computer, recently changed computers, or are using a loaner laptop, you will likely need to follow the steps in the two articles below to export this certificate from your primary computer and import it into the target computer:


1) How to EXPORT your VPN certificate file from your Windows-based BRCC computer


2) How to IMPORT your VPN certificate onto the target computer (Windows or Mac)



Vendors: IT staff will need to provide you with your certificate. Please contact [email protected] to request IT staff provide you with your Global Protect user certificate.



How to Connect Global Protect VPN:

 

1. Single click on the Global Protect icon in your Windows task bar - you might need to click the carrot icon ^ to the left on the clock along the lower edge of your screen. The Global Protect icon looks like a small globe:  

2. Make sure our VPN server address, "vpn-cld.blueridge.edu" ,  is filled in the text box and then click "Connect".


3. You might be prompted to select or provide a "certificate" to authenticate to the VPN system.

  • If prompted, allow the Global Protect client to read or 'use' your certificate.
  • If prompted to select a certificate - select the certificate with your BRCC username. If there is more than one matching certificate, look for the certificate that references the "Global Protect User Certificate". Otherwise, select the first one in the list and then try the next until the connection is successful.

4. If prompted, login with your normal BRCC username and password where your username should be your complete College-issued email address such as [email protected]


5. If prompted, follow the steps to complete the multifactor (MFA) authentication step. Since this VPN system uses the same Microsoft Entra authentication service as our other technologies, you might not always be prompted to login. If you aren't prompted to login, this means that the VPN software is able to reuse another current or recent login session.


6. Once the VPN is connected, a "Welcome to Global Protect" webpage will appear and the VPN client will indicate it is connected. Once connected, you can use a Microsoft Remote Desktop client to remotely connect to a computer on campus or to our dedicated VPN terminal server.


  • In some cases, particularly on Mac computers, you might initially receive a 'can't connect to gateway' error message. If this message occurs, please wait about 2 minutes while the VPN client automatically tries to reconnect. If it still hasn't successfully connected after 2 minutes, please contact the IT Help Desk at 828-694-1891. 


7. Once you no longer need the VPN, right-click on the Global Protect VPN icon in your Windows task bar and select "disconnect". The VPN will automatically disconnect after 12 hours.


VPN Client Updates:


This VPN system automatically pushes out new versions of the Global Protect VPN client software. Occasionally, about 3 times a year, when you connect to the VPN, you might be prompted to download and then install a client update. We strongly recommend you allow the client to update itself when prompted. However, if you are in a rush, you can delay the update. 


The update does not require administrator permissions and it generally takes less than 5 minutes. 


You will be prompted TWICE -- once to download the update, then a few moments later, to install the update. 


The update is done in the background automatically so there is no clear indication that it is progressing. Therefore, once you allow the installation to proceed, we suggest you step back for about 5 minutes and wait for the process to happen. 



Global Protect software update prompt