GlobalProtect and Duo

*NOTE - There are a lot of steps to take for this setup, but they all need to be taken in order to remote into your work computer. Please follow them very carefully. On this note, it is highly recommended that you use the Duo Mobile app on your smart phone for the two-factor authentication. If you are unable to use the Duo Mobile app, please put in a Trackster and we will help setup an alternative option.

The first step that needs to be taken is to download and install the Duo Mobile app on your smart phone. You can find this in the Play Store (Google phones) or the App Store (iPhones) and it should look like this (and yes, it has a low rating).

Screenshot of the Duo Mobile app icon on a phone. App icon is a blue shield with a white checkmark. Text reads: "Duo Mobile" and shows a 2.6 star rating.

Open the Duo app and you should see a Welcome screen, touch the Setup account button.

Duo app welcome screen with “Setup account” button highlighted. Instructions read: “Open the Duo app and you should see a Welcome screen, touch the Setup account button.”

Touch Use a QR code button.

Screenshot of a phone screen displaying a "Touch to use a QR code" button.

If you are prompted about letting Duo, select Only this time

Screenshot of a Duo Security prompt. Text reads: "Protect This Device? This device is attempting to connect to [organization name]. To help protect your account, verify it’s you." Options: "Push to [phone number]", "Enter a Passcode", "Remember this device". Below: "Need help?". A checkbox reads: "Don't ask again on this device." A button reads: "Only this time."

Once you have the Duo Mobile app downloaded and setup to the point of scanning for the QR code, navigate to this site on your computer.

https://netid.colostate.edu/

At the top of the page, hover over View/Update and click on Two-Factor Authentication (Duo)

Screenshot of a webpage with instructions for setting up Duo Two-Factor Authentication. Text reads: "Once you have the Duo Mobile app downloaded and setup to the point of scanning for the QR code, navigate to this site on your computer: netid.colostate.edu. At the top of the page, hover over View/Update and click on Two-Factor Authentication (Duo)."

Select CSU Fort Collins Login

Screenshot of a login screen with options to select CSU Fort Collins. Text reads: “Select CSU Fort Collins.”

If prompted, sign in with your NetID username and password. You should now be prompted to use Duo. Normally during this part of the Duo Authentication, selecting Send Me a Push would work, but with the new phone, this will not receive the push. Instead, click on Call Me and wait for the call (please note, this is only if you kept your same number for your new phone). Once you get the call, answer it, and push the # key on your phone to accept the Duo authentication.

You should now see your currently registered device(s). Find your old phone in the list and click the Delete button on the right-hand side.

Screenshot of a computer screen showing a list of registered devices. A "Delete" button is visible to the right of each device entry.

Once the device(s) has been deleted, click on the Register Device button.

Fill out the information for your new phone and click the Save button.

*Note – The Device Name can be any name you wish, the Phone Number cannot have spaces in it but must be your cell phone number, Type must be DUO mobile app, and the Platform is your best guess as to what type of phone you have. Please note, even if the wrong platform is picked, it will correct it on the next screen.

You should now see a QR code on your monitor. At this time, point your camera from your new phone (it should still be in the Duo Mobile app) at the QR code on your monitor and NOT at the QR code in the screenshot below and it will register Duo on your Duo Mobile App. Click the Return link just below the QR code.

Screenshot of computer screen displaying a QR code and instructions: “You should now see a QR code on your monitor. At this time, point your camera from your new phone (it should still be in the Duo Mobile app) at the QR code on your monitor and NOT at the QR code in the screenshot below and it will register Duo on your Duo Mobile App. Click the Return link just below the QR code.”

Back on your phone, touch the Next button.

Phone screen showing "Next" button. Text reads: "Back on your phone, touch the Next button."

Leave the name as its default and touch the Save button.

Screenshot of GlobalProtect setup window. Text reads: "Return to the previous screen to make changes, or click Save to continue." Save button highlighted.

On the next screen, touch the Skip button.

Screenshot of a phone screen with instructions: “On the next screen, touch the Skip button.”

On the Pro Tip screen, touch the Allow notifications button.

Screenshot of a phone screen displaying instructions: “On the Pro Tip screen, touch the Allow notifications button.”

If prompted, touch the Allow button to grant permissions for Duo to send notifications to your phone.

Screenshot of a Duo Security prompt. Text reads: “If prompted, touch the Allow button to grant permissions for Duo to send notifications to your phone.”

On the Improving your experience, touch the Turn off button.

Screenshot of a computer screen displaying instructions for disabling a feature. Text reads: "On the Improving your experience, touch the Turn off button."

You may get a notification that Usage data collection disabled, touch the OK button.

Screenshot of a computer screen displaying a GlobalProtect and Duo Security setup window. Text reads: "Usage data collection disabled, touch the OK button."

On the Almost there screen, touch the OK button.

Screenshot of a phone screen displaying the message "Almost there." with an "OK" button. Text reads: "Almost there. Touch the OK button."

Your screen should now display the Colorado State University account. If you are prompted to setup backups, just touch No thanks. You new phone should now work with Duo.

Screenshot of a phone displaying the Colorado State University account setup screen. Text reads: "Your screen should now display the Colorado State University account. If you are prompted to setup backups, just touch No thanks. You new phone should now work with Duo."

Now that Duo is setup, we need to setup GlobalProtect on your personal computer.

1. Go to this page and log in with your eID username, password, and Duo.

a. https://gateway.colostate.edu

2. Click on the Download the GlobalProtect Agent in the top right-hand corner

3. Click on the link that says Download Windows 64…

4. Install the agent and if it prompts you for a Portal address, it will be

a. gateway.colostate.edu

b. You should be able to connect up to GlobalProtect at this point. Please note, you will need to connect up each day in order to remote into your computer

Now that your personal computer is connected to Pulse Secure, you can remote into your work computer. To do this, click on your start button and type in Remote Desktop Connection, before you finish typing this out, you should see the Remote Desktop Connection app show up at the top, click on it.

Screenshot of instructions for connecting to GlobalProtect and Remote Desktop. Text reads: “Install the agent…remote into your work computer.” Unclear image.

*Note - BE SURE to leave your work computer on, if it is powered off, you will not be able to remote into it.

This will open up the Remote Desktop Connection window, all you need to do now is type in your computer name from work (it should be your department name followed by your eID), for example bfs-computername.acns.colostate.edu.

Please note, the computer name must have the .acns.colostate.edu in the name or you may not be able to connect. You can now click on the Connect button to start the remote session to your computer.

Screenshot of Remote Desktop Connection window with instructions: "Return only the alt text description, no other content." Text reads: "BE SURE to leave your work computer on…bfs-computername.acns.colostate.edu." and "Click Connect."

*Note – If you do not know what the name of your work computer is, on your work computer, open up File Explorer (the same place you access the network drives) and right click on This PC and select Properties.

Screenshot of a window titled "GlobalProtect Connection Status" displaying "Connected" with green checkmarks, and below it, a window titled "Duo Security" showing "Duo Push" with a prompt to "Approve" or "Deny."

On this new window, about halfway down you will see your computer name displayed, be sure to write this down as this is what you will need to type into the Remote Desktop Connection.

Screenshot of a computer window with instructions to note the computer name for use with Remote Desktop Connection.

*Note – If you have more than one monitor on your personal computer, you can use all of them in the remote session, all you need to do it click on the Show Options button, click on the Display tab and check the box next to Use all my monitors for the remote session.

Screenshot of GlobalProtect remote session options window. Text reads: “If you have more than one monitor on your personal computer, you can use all of them in the remote session, all you need to do is click on the Show Options button, click on the Display tab and check the box next to Use all my monitors for the remote session.”

*Note - – If you have a home printer hooked directly into your computer, you can use it to print in the remote session, all you need to do it click on the Show Options button, click on the Local Resources tab and check the box next to Printers.

Screenshot of a computer window showing instructions for enabling local printer access within a remote session. Text reads: "If you have a home printer hooked directly into your computer, you can use it to print in the remote session, all you need to do it click on the Show Options button, click on the Local Resources tab and check the box next to Printers."

*Note – If you picked any of the above extra settings and connect to your work computer, the next time you remote in, it will remember these settings, you do not need to check these each time.

You should get a popup window asking if you trust this connection, check the box next to Don’t ask me this again… and click the Connect button.

Screenshot of GlobalProtect and Duo authentication window. Text reads: "If you picked any of the above extra settings and connect to your work computer, the next time you remote in, it will remember these settings, you do not need to check these each time. You should get a popup window asking if you trust this connection, check the box next to Don't ask me this again and click the Connect button."

You will now be prompted to enter in your credentials, there is a good chance that it will use your local credentials by default, so click on the on the More choices link and select Use a different account. For the username you must have colostate\eIDname and then you can enter your eID password, click the OK button to start up the remote session.

$Screenshot of GlobalProtect login window. Text reads: “Return only the alt text description, no other content.” Instructions detail logging in with colostate\eIDname and eID password, selecting “Use a different account” if local credentials are used by default, and clicking “OK.”$

You will now be able to work from home using your work computer, anything you could do on your work computer, you can now do from this remote session. When you are finished with your remote session, just click the X on the blue bar at the top center of your remote session.

Screenshot of a remote desktop connection window. Text reads: "You will now be able to work from home using your work computer, anything you could do on your work computer, you can now do from this remote session. When you are finished with your remote session, just click the X on the blue bar at the top center of your remote session."

You may get a warning window, saying that your session will be disconnected but all programs will continue to run. It is ok to click the OK button on this, but if you do not wish to see this again, check the box next to Don’t display… and click the OK button.

Screenshot of a GlobalProtect window with a message: “Your session will be disconnected but all programs will continue to run. It is ok to click the OK button on this, but if you do not wish to see this again, check the box next to Don't display. and click the OK button.” Options are "OK" and "Cancel".

*Note – If you click on your start button while in a remote session, you do have the option to power off your work computer from home, you can even reboot it if you are having issues. But, if you do power it off, you will not be able to start it up remotely, you would have to have someone at work start it up or come back into the office to power it back on again. Also, when you open a remote session, you are working on your work computer, so anything you can do here at work on your computer, you will be able to do in this remote session.

GlobalProtect and Duo - Home Setup