Virtual Private Network (VPN) and Two-Factor Authentication (2FA)

When you are off-campus VPN is required to:

• Access secure University information (Student Administration, Financials, Employee Self-Service, and others)
• Remotely access an on-campus computer
• Connect to mapped drives

There are two requirements to connect to the VPN:

1. Download and install the University's Virtual Private Network (VPN) software (Global Protect) to your computer or Cisco AnyConnect for mobile devices
2. Enroll in Duo Two-Factor Authentication

Step 1: Download Global Protect VPN software to your computer

Per HOP 5.8.8-Information Resource Security Configuration Management, steps must be taken to ensure that devices connected to the network are compliant with University standards.

Note for Windows systems:  Upgrade to Windows 10 to continue to receive security updates from Microsoft by visiting https://www.microsoft.com/en-us/software-download/windows10. You will need a legal copy of Windows 7 or 8 to do this. For more details, check out this article: by Forbes.com.  If this option doesn't work for you, a Windows 10 software upgrade for personal computers can be purchased for $22 at the Campus bookstore with a UT Health SA badge/ID.  Support for Windows 7 ended on January 14, 2020.

Determine the correct operating system of your computer and download the Global Protect VPN software.

Windows computers

Select agent to download the Global Protect software

1. Windows 32-bit agent
2. Windows 64-bit agent
3. How do I know which Windows version to select?

Apple/Mac computers

1. Mac OSX agent for Global Protect download
2. Follow the instructions to install Global Protect
3. Note: Enter gpgateway.uthscsa.edu for the Portal address

Mobile device: (iPad/Android tablet or smart phone)

Cisco AnyConnect is a temporary work around for Mobile VPN access. These instructions will be updated when a long-term appliance for Mobile VPN access is determined.

1. AnyConnect Mobile VPN for iOS
2. AnyConnect Mobile VPN for Android

Step 2: Enroll in DUO Two-Factor Authentication

1. Enrolling for the DUO Two-Factor Authentication begins with an email from the University Duo system.
   
   1. New students/employees will receive an email from Duo Security when their email account is created.
      1. For those who do not have an employee email, a text message can be sent by the Service Desk to enroll.
         
   2. Current students/employees: call the Service Desk at 210-567-7777 option 1 (Mon-Fri, 6am-6pm) and request the Duo registration email. For those who do not have an employee email call the Service Desk for assistance.
   3. Click the link and follow the steps to complete the enrollment process. (DUO Enrollment Guide)

Step 3: Login in to VPN and complete Two-Factor Authentication when prompted

Use the authentication method you registered for to receive the code:

1. For Push notification to your smart phone enter "1", click OK, and then click Accept on your phone
2. For Call notification to your land line or cell phone enter "2", click OK, answer the call and follow the steps
3. For Text notification to your cell phone enter "3", click OK, and enter the code from the text
4. To retrieve a code from the DUO app open the app, click the key, and enter the code
5. Retrieve code from a Hardware Token (purchase at the TechZone $22)

Step 4: Access the information you need or begin a Remote Desktop session