What is VPN (Global Protect)?

You can use any laptop or desktop to connect to Lawrence Tech’s network resources from off campus by using the Lawrence Tech VPN (Virtual Private Network) Service. The VPN that we use is called Global Protect. Lawrence Tech’s VPN service allows University faculty, staff and students to securely “tunnel” in and access network resources as if they were on campus.


Connecting to VPN

  1. If you are installing or reinstalling GlobalProtect please go to https://gateway.ltu.edu and login using your Canvas username and password.

  2. Download and install the correct GlobalProtect program for your computer:


  3. Search for the GlobalProtect application on your computer


  4. In the "Portal" box type "gateway.ltu.edu"


  5. Enter your Canvas/Network username and password


  6. When GlobalProtect shows "Connected" you are connected to the VPN
  1. Search for the GlobalProtect application on your computer


  2. In the "Portal" box type "vpn.ltu.edu"


    If there is no option to enter a portal address click the three lines then click "Settings"


    Under "Portals" click "Add" then type "vpn.ltu.edu" Click "Save" then close the window


  3. Enter your Canvas/Network username and password


  4. Select your DUO authentication method and accept the DUO push or call


  5. When GlobalProtect shows "Connected" you are connected to the VPN
  1. Search for the GlobalProtect application on your computer


  2. In the "Portal" box type "vpn.ltu.edu"


  3. Enter your Canvas/Network username and password


  4. Select your DUO authentication method and accept the DUO push or call


  5. When GlobalProtect shows "Connected" you are connected to the VPN


  • ArcGIS
  • Autodesk
  • City Engine
  • Comsol
  • MathCAD
  • Mimics
  • Rhino 
  • RhinoCAM
  • Siemens NX
  • Solidworks
  • Spartan

Installing VPN (Global Protect)

  1. Open your internet browser and navigate to vpn.ltu.edu
  2. Login using your campus login username and password.
  3. Select the correct VPN client for your computer, it will then automatically download.
  4. Navigate to your downloads folder and double-click the installation file, the program will then install.
  5. Follow the prompts for install. At some point during the install, you will need to allow Palo Alto to load. This may be indicated with a message indicating the System extension was blocked.

Global Protect log in

Global Protect select

What is DUO?

In our efforts to provide continuing cyber security improvements, LTU has implemented two-factor authentication (2FA) on several different systems for LTU resources using a service call DUO. This service will provide two-factor authentication on many of our other proprietary and business critical applications, including VPN, Banner Forms, etc.

Duo allows LTU to verify the identity of all users with effective, strong authentication (two-factor authentication) before granting access to University applications and resources. Check your app store to download the DUO app.

For more information please visit: Duo Enrollment

You will have received an enrollment email from no-reply@duosecurity.com with the subject “Duo Security Enrollment”. Click the link in the email to start the process. Here is a sample of the email you will receive:

Duo Security < no-reply@duosecurity.com >

SUBJECT: LTU 2-Factor/Duo Security Enrollment

Hello,

Lawrence Tech is now rolling out Duo Security, a friendly and secure way for you to log into LTU's applications. We have invited you to set up your account for Duo so you can start logging in.

To begin, click this link to enroll a phone, tablet, or other device:

< enrollment-link >

Duo Security is a two-factor authentication service that strives to be easy to use and secure. To learn more about Duo authentication, visit the guide here:

< guide-link >

  1. This will take you to the LTU Duo enrollment site. Click to start setup.

DUO Start

  1. Select the type of device to be used with Duo. Using the Duo Mobile app on a mobile phone is recommended for ease of use, and provides additional functionality. Other options are to receive SMS text messages, mobile or landline calls, or use a physical authentication token. However, these methods are not as user-friendly and incur additional costs to the university for each authentication.

DUO Device Type

  1. For enrollment of a mobile phone, enter and verify the phone number.

DUO Verify Number

  1. iPhone, Android, and Windows Phones can receive a push from the Duo app. Other cell phones work by receiving a code via SMS text message.

DUO Phone Type

  1. Install the Duo Mobile app by searching your phone’s app store for “Duo Mobile”. Then click “I have Duo Mobile installed”.

DUO Android

  1. You can use the phone’s camera to scan the QR-code displayed on the computer screen and simplify the activation process. Alternatively, you can select to have an activation link emailed.

DUO Android Activate

  1. On your phone launch the Duo app and select “Get Started”.

DUO App

  1. Align the camera view on the phone to fit the QR-code on the computer screen. It should scan within a few seconds.

DUO QR Code

  1. The activation screen on the computer will indicate when the barcode is recognized on the phone.

DUO Android Activated

  1. Once activated, set your default Duo authentication setting. It is recommended to select “Ask me to choose an authentication method” to reduce potential problems when using multiple applications.

DUO Settings Two

DUO Success

  1. To manage your DUO settings and devices, go to https://duo.ltu.edu and login with you credentials.

Device Management 1

  1. Select the "My Settings & Devices" link on the left hand side. If an automatic DUO authentication was already in progress, first cancel it from the button on the bottom.

Device Management 2

Device Management 3

  1. Before settings and devices can be managed, DUO authentication must be performed to prove your identity. Select an authentication device and method, and authenticate with DUO

Device Management 4

  1. Once authenticated, you will see options to add another device, modify current device options, and change the default behavior when you log in.

Device Management 5

  1. It is recommended to set the log in behavior to "Ask me to choose an authentication method." This ensures that pushes are not sent without your approval, this allows flexibility to choose different methods as needed.

Device Management 6

  1. If you have changed phones or reinstalled the DUO Mobile app, and the phone number has remained the same, it can be reactivated under the Device Options button. If the device number has also changed, please contact the LTU Help Desk for assistance.

Device Management 7

  1. If there are multiple devices added to your account, the default device can be changed. Using the DUO Mobile app on a mobile phone is recommended for ease of use, and provides additional functionality. Methods involving calls and SMS texts also incur additional costs to the university.

Device Management 8

  1. When finished click the save icon on the bottom and close the browser tab.

Device Management 9

Duo FAQs


Duo is a two-factor authentication provider that helps to secure access to applications. After entering your regular LTU username and password a second layer of security takes place where you are asked to prove your identity with a pre-registered Duo device such as a smartphone.

Two-factor authentication means logging in with something you know (your password) and something you have (your phone or other device). Through this combination an attacker would need to possess both parts to successfully compromise your account.

Yes, for faculty and staff to access certain LTU services such as Banner 9, ImageNow, VPN, etc. Duo authentication will be required.

In most cases you do not. You will be able to continue to use the VPN without Duo to access the licensing servers and shared drives. However, if you are a student worker that accesses Duo protected applications such as Banner 9 or ImageNow, you will need to use Duo. Students with access to shared drives will also require Duo to access the drives.

No, Duo helps to secure LTU applications accessed from any supported device.

Duo can use a phone as a second factor of authentication, either through the Duo Mobile smartphone app, or by receiving SMS text messages or phone calls. The smartphone app is recommended for ease of use, as it only requires tapping to accept or deny the login.

No, installing Duo Mobile only serves to provide a second layer of authentication for LTU services. Permissions used by the application are limited to those required for this purpose and to ensure that the device is not already compromised.

The Duo Mobile app on smartphone is the recommended method if possible since it is more flexible and easier to use to authenticate. But if you don’t have a smartphone or have one that does not support the app then login codes can be received by SMS text messages to any cell phone, or calls can be received to cell or landline phones.

In order to add a device to support Duo logins, you will need to first setup a screen lock, passcode, or biometric security on your phone before authenticating to LTU services.

In the Duo Mobile app there is a key icon next to the LTU profile that will generate a six digit passcode which can be used to authenticate with Duo. If you do not have a smartphone and will be travelling outside of cell service, please contact the LTU Help Desk to discuss options.

Due to the global prevalence of security breaches in recent years, Duo is being used as an additional measure to protect LTU services. Adding a second factor of authentication for logins greatly improves security. It would be much more difficult for a hacker to both know your password and have possession of your phone or other device.

Duo supports authentication through Android and IOS smartphones and tablets, feature phones (non-smart) by SMS text messages or calls, landlines by calls, and physical authentication tokens. The Duo Mobile app on smartphones and tablets is the easiest, quickest, and most flexible method to use and is therefore recommended. The other options are more difficult requiring manual generation and entry of a changing passcode, and also incur additional costs to the University upon each authentication.