Problem with VPN and DUO Push Notifications
Resolved Alert:
ITS has resolved a problem with VPN and DUO authentication that would have impacted people connecting to VPN from about Monday, January 11 at 10:30pm until Tuesday, January 12, at 8:30am.
During that time, people connecting to VPN would have experienced 5 DUO push notifications in rapid succession and an authentication timeout window of about 25 seconds. This is very similar to the problem that was observed Monday morning and occurred when an automatic process overwrote authentication timer configuration. Working with our vendor, we’ve applied a patch that will keep this configuration in place.
Now that the problem is resolved, people connecting to VPN will receive at most 2 DUO push notifications for each login attempt – one immediately and a second one 30 seconds later if the first is not acted on. The total authentication timeout window to complete user/password and DUO 2FA is now 50 seconds.
(READ MORE)Alert Updates:
ITS has resolved a problem with VPN and DUO authentication that would have impacted people connecting to VPN from about 3:00 am to 10:15 am on Monday, January 11, 2021.
During that time, people connecting to VPN would have experienced between 2 and 5 DUO push notifications in rapid succession and a very quick authentication timeout.
Now that the problem is resolved, people connecting to VPN will receive at most 2 DUO push notifications for each login attempt – one immediately and a second one 30 seconds later if the first is not acted on. The total authentication timeout window to complete user/password and DUO 2FA is now 50 seconds.
Initial Alert:
January 11, 2021 3:00 a.m.
If you have any questions or concerns, please contact the ITS Support Center at 703-993-8870, or via email at support@gmu.edu.
For additional information regarding the outage, please view the After Action Report.