CoE - Upcoming VPN MFA Changes

The College of Engineering VPNs (full, split, license, etc.) are changing to use the same web login method that many other college resources already use. This will simplify the way logging into the VPN works in addition to providing enhanced security for both your account and the college by requiring you to Duo MFA during sign-in.

VPN with MFA requires Engineering Duo, and a currently supported version of the GlobalProtect client.

Engineering Duo

You need to be enrolled in Duo with the College of Engineering. This is separate from the Duo enrollment you may have for your campus NetID.

Please see CAE Duo - Overview of MFA DUO in Engineering for more details. If you do not activate ahead of time, you will be enrolled during the login process, which may be inconvenient.

GlobalProtect Client

On a Windows PC or Mac, you'll need at least version 6.2.4. Mobile devices such as Android and iPhones already support the new login method and do not need to be updated. Linux machines should also work as long as you have a recent GlobalProtect client. If you have concerns or specialized needs, contact the CAE helpdesk.

If your computer is provided by the College of Engineering and connects automatically using the "always-on" or "Admin" VPN, these changes don't apply to your computer.

Starting in December, we are implementing a prompt to warn you when your client is out of date:

Screenshot of the update prompt from GP

If you see this warning, your client is out of date and you need to update it. See Getting a supported GlobalProtect client.

Determining your GlobalProtect version

Mac

Find the GlobalProtect icon in the top menu bar and click it. Click on the menu icon, then depending on your current version of GlobalProtect, you'll have to click either About:

GP Settings v5 GP Mac about version 5

Or Settings, then click on About:

GP Settings Menu Item GP Version Page

Windows

Find the GlobalProtect icon in the notification tray, and click it. Click on the menu icon, then depending on your current version of GlobalProtect, you'll have to click either About:

GP About Menu Item GP Version

Or Settings, then click on About:

GP About Settings Item GP Settings/Version

Getting a supported GlobalProtect client

If you're on a PC or Mac and your GlobalProtect version is at least 6.2.4, you're all set. If you're running an older version, please continue reading.

In the last few weeks you may have been receiving a prompt upon VPN login about updating your GlobalProtect software. The simplest way to ensure your client is ready is to allow this upgrade.

GlobalProtect Update Available (Mac)

GlobalProtect Update Available (Windows)

If for some reason you are unable to update this way, you can download the latest clients from the following links:

Clients for other operating systems (Windows 32-bit, ARM, etc) are available here.

Overview of the new login process

Instead of the username and password prompt in the GlobalProtect app, a new window will open showing the College of Engineering login page. Enter your CAE username and password, and MFA using Duo. At this time a notification push to your mobile device or a fob code are the only methods of MFA that are officially supported.

Screenshot of the GP Login Page Screenshot of the GP MFA Page

If you have not set up Duo with the College of Engineering ahead of time, you'll be prompted enroll the first time you log into the VPN. Follow the Duo enrollment wizard to finish setting up Duo.

GP DUO Enrollment Prompt