<div dir="ltr"><div><br></div>FYI for VPN user.<div><br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div>William Nguyen<br></div><div>Operating Systems Analyst </div><div>College of Engineering, ENG-224</div><div><span style="font-size:12.8px">San Diego State University</span></div><div><span style="font-size:12.8px">5500 Campanile Drive</span></div><div><span style="font-size:12.8px">San Diego, CA 92182-1326</span></div><div>Tel: 619-594-2003<br></div><div>Fax: 619-594-6005</div><div>E-mail: <a href="mailto:wnguyen@sdsu.edu" target="_blank">wnguyen@sdsu.edu</a></div></div></div></div><br><br><div class="gmail_quote"><div dir="ltr">---------- Forwarded message ---------<br>From: <strong class="gmail_sendername" dir="auto">IT Security Office</strong> <span dir="ltr"><<a href="mailto:security@sdsu.edu">security@sdsu.edu</a>></span><br>Date: Thu, Nov 8, 2018 at 9:19 AM<br>Subject: Fwd: DUO Implementation for VPN Users<br>To: Diana Osborn <<a href="mailto:diana@sdsu.edu">diana@sdsu.edu</a>>, William Nguyen <<a href="mailto:wnguyen@sdsu.edu">wnguyen@sdsu.edu</a>><br></div><br><br><div dir="ltr"><div dir="ltr">Just a heads up for a pretty major VPN change happening this weekend. I think the notice went out to people identified as single-factor VPN users, so if you already use Duo then you may not have gotten this. If your single-factor users have not enrolled in Duo, they are in for a surprise the next time they try to connect after Friday.<br><br>Gene<br><br><br><div class="gmail_quote"><div dir="ltr">---------- Forwarded message ---------<br>From: <b class="gmail_sendername" dir="auto">Michael Murashkovskiy</b> <span dir="ltr"><<a href="mailto:mmurashkovskiy@sdsu.edu" target="_blank">mmurashkovskiy@sdsu.edu</a>></span><br>Date: Fri, Nov 2, 2018 at 11:36 AM<br>Subject: DUO Implementation for VPN Users<br>To: <br>Cc: <a href="mailto:security@sdsu.edu" target="_blank">security@sdsu.edu</a> <<a href="mailto:security@sdsu.edu" target="_blank">security@sdsu.edu</a>><br></div><br><br>
<div lang="EN-US">
<div class="m_2766720806514941271gmail-m_-7441499714016098152WordSection1">
<p class="MsoNormal">Hi Colleagues, <u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">In an effort to improve the security of our VPN connections, we will be incorporating Duo Security as a two-factor authentication (2FA) solution into our existing VPN infrastructure. Two-factor authentication provides a second layer of
security to your login, requiring extra information or a physical device to log in, in addition to your password. By requiring two different channels of authentication, we can protect user logins from remote attacks that may exploit stolen usernames and passwords.<br>
<br>
<u></u><u></u></p>
<p class="MsoNormal"><b>Why do we need two-factor authentication?<br>
</b>Login credentials are more valuable than ever and are increasingly easy to compromise. Over 90% of breaches today involve compromised usernames and passwords. Two-factor authentication enhances the security of your account by using a secondary device to
verify your identity. This prevents anyone but you from accessing your account, even if they know your password.
<br>
<br>
To learn more about two-factor authentication, watch <span class="m_2766720806514941271gmail-m_-7441499714016098152MsoHyperlink"><a href="https://www.youtube.com/embed/0mvCeNsTa1g?rel=0&showinfo=0%22%20frameborder=%220%22%20allow=%22autoplay;%20encrypted-media%22" target="_blank">this video</a></span>.
<u></u><u></u></p>
<p class="MsoNormal"><b><br>
How will Duo change my login experience?<u></u><u></u></b></p>
<p class="MsoNormal"><br>
When logging into Global Protect VPN, you will still enter your username and password. After inputting your login information, Duo will require you to complete a method of second-factor authentication. Duo does not replace or require you to change your username
and password. Think of Duo as a layer of security added to your pre-existing login method.
<br>
<br>
To learn more about your experience using two-factor authentication, watch <span class="m_2766720806514941271gmail-m_-7441499714016098152MsoHyperlink">
<a href="https://www.youtube.com/embed/_T_sJXnSM98?rel=0&showinfo=0%22%20frameborder=%220%22%20allow=%22autoplay;%20encrypted-media%22%20allowfullscreen" target="_blank">this video</a></span>.<u></u><u></u></p>
<p class="MsoNormal"><b><br>
Action Required:<u></u><u></u></b></p>
<p class="MsoNormal"><b><br>
By November 9th</b>,<b> </b>please go to the DUO self-registration portal to enroll your 2<sup>nd</sup> factor authentication method. If you are on-campus please go to
<span class="m_2766720806514941271gmail-m_-7441499714016098152MsoHyperlink"><a href="https://duoportal.sdsu.edu" target="_blank">https://duoportal.sdsu.edu</a></span> to register. To login use your current SDSUid credentials. If you have a current VPN connection using just your username and password, you can still use that
to access this link. In the event you don’t have access to your VPN account and are not on-campus, please use this this link:
<span class="m_2766720806514941271gmail-m_-7441499714016098152MsoHyperlink"><a href="http://l.sdsu.edu/duoportal-external" target="_blank">http://l.sdsu.edu/duoportal-external</a></span> to access the portal off-campus. Please note, you may be asked to login twice with your SDSUid. Once you are in the portal, follow the
self-enrollment process to register your phone and install the Duo Mobile application. If you do not have a smartphone, you can enroll a regular cell phone (SMS text messages + calls) or use a SDSU desk phone landline (calls) for two-factor authentication.<br>
<br>
<u></u><u></u></p>
<p class="MsoNormal">For more information on how to enroll your devices and about DUO / VPN please go to our Security Portal on the SDSU Intranet.
<br>
<b><br>
SDSU DUO Enrollment / VPN Guides:</b><br>
IAM Services - <span class="m_2766720806514941271gmail-m_-7441499714016098152MsoHyperlink"><a href="http://l.sdsu.edu/iamservices" target="_blank">http://l.sdsu.edu/iamservices</a></span><br>
VPN Services - <span class="m_2766720806514941271gmail-m_-7441499714016098152MsoHyperlink"><a href="http://l.sdsu.edu/vpnservices" target="_blank">http://l.sdsu.edu/vpnservices</a></span><br>
<br>
<u></u><u></u></p>
<p class="MsoNormal"><b>What will happen after November 9<sup>th</sup>?<u></u><u></u></b></p>
<p class="MsoNormal">Two-factor authentication (2FA) will be enforced and required for all VPN users. You will have until November 9<sup>th</sup> to self-enroll your second<sup>
</sup>factor authentication method. After this date, access to Global Protect VPN will require Duo two-factor authentication. You will no longer be able to access VPN with just your AD credentials.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">If you have any questions, please feel free to contact us at
<a href="mailto:security@sdsu.edu" target="_blank">security@sdsu.edu</a><br>
<br>
<u></u><u></u></p>
<p class="MsoNormal">Best Regards,<br>
<br>
Michael Murashkovskiy<br>
Campus Information Security Officer<br>
San Diego State University<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
</div></div></div>
</div></div></div>