Array
(
    [_edit_lock] => Array
        (
            [0] => 1610468042:17
        )

    [_edit_last] => Array
        (
            [0] => 17
        )

    [show_in_notification] => Array
        (
            [0] => 0
        )

    [_show_in_notification] => Array
        (
            [0] => field_5b73bb207b697
        )

    [status] => Array
        (
            [0] => Resolved
        )

    [_status] => Array
        (
            [0] => field_5b47fa29827c3
        )

    [new_outage_message] => Array
        (
            [0] =>  
        )

    [_new_outage_message] => Array
        (
            [0] => field_5b71b781c537c
        )

    [start_date_and_time] => Array
        (
            [0] => 2021-01-11 03:00:00
        )

    [_start_date_and_time] => Array
        (
            [0] => field_5b634bb5d7f0c
        )

    [status_update_repeater] => Array
        (
            [0] => 1
        )

    [_status_update_repeater] => Array
        (
            [0] => field_5b71b80efbb63
        )

    [e-mail_settings_e-mail_alerts] => Array
        (
            [0] => yes
        )

    [_e-mail_settings_e-mail_alerts] => Array
        (
            [0] => field_5b5ebeb3cd8f5
        )

    [e-mail_settings_listserv_to_wich_to_post_e-mail] => Array
        (
            [0] => a:1:{i:0;s:19:"ITS Alerts Listserv";}
        )

    [_e-mail_settings_listserv_to_wich_to_post_e-mail] => Array
        (
            [0] => field_5b5ebf07cd8f6
        )

    [e-mail_settings] => Array
        (
            [0] => 
        )

    [_e-mail_settings] => Array
        (
            [0] => field_5b5ebd94cd8f4
        )

    [_jd_tweet_this] => Array
        (
            [0] => no
        )

    [_yoast_wpseo_focuskeywords] => Array
        (
            [0] => []
        )

    [_yoast_wpseo_keywordsynonyms] => Array
        (
            [0] => [""]
        )

    [resolved_text_area] => Array
        (
            [0] => ITS has resolved a problem with VPN and DUO authentication that would have impacted people connecting to VPN from about Monday, January 11 at 10:30pm until Tuesday, January 12, at 8:30am.

During that time, people connecting to VPN would have experienced 5 DUO push notifications in rapid succession and an authentication timeout window of about 25 seconds. This is very similar to the problem that was observed Monday morning and occurred when an automatic process overwrote authentication timer configuration. Working with our vendor, we've applied a patch that will keep this configuration in place.

Now that the problem is resolved, people connecting to VPN will receive at most 2 DUO push notifications for each login attempt – one immediately and a second one 30 seconds later if the first is not acted on. The total authentication timeout window to complete user/password and DUO 2FA is now 50 seconds.
        )

    [_resolved_text_area] => Array
        (
            [0] => field_5b599c74dc9ef
        )

    [end_date_and_time] => Array
        (
            [0] => 2021-01-12 08:30:13
        )

    [_end_date_and_time] => Array
        (
            [0] => field_5b634c1bd7f0e
        )

    [status_update_repeater_0_update_message] => Array
        (
            [0] => ITS has resolved a problem with VPN and DUO authentication that would have impacted people connecting to VPN from about 3:00 am to 10:15 am on Monday, January 11, 2021.

During that time, people connecting to VPN would have experienced between 2 and 5 DUO push notifications in rapid succession and a very quick authentication timeout.

Now that the problem is resolved, people connecting to VPN will receive at most 2 DUO push notifications for each login attempt - one immediately and a second one 30 seconds later if the first is not acted on. The total authentication timeout window to complete user/password and DUO 2FA is now 50 seconds.
        )

    [_status_update_repeater_0_update_message] => Array
        (
            [0] => field_5b72a358f2ae8
        )

    [status_update_repeater_0_update_date_time] => Array
        (
            [0] => 2021-01-11 10:42:00
        )

    [_status_update_repeater_0_update_date_time] => Array
        (
            [0] => field_5b71b8a556691
        )

    [email_alert_status] => Array
        (
            [0] => 1
        )

)

Problem with VPN and DUO Push Notifications

Resolved Alert:

ITS has resolved a problem with VPN and DUO authentication that would have impacted people connecting to VPN from about Monday, January 11 at 10:30pm until Tuesday, January 12, at 8:30am.

During that time, people connecting to VPN would have experienced 5 DUO push notifications in rapid succession and an authentication timeout window of about 25 seconds. This is very similar to the problem that was observed Monday morning and occurred when an automatic process overwrote authentication timer configuration. Working with our vendor, we’ve applied a patch that will keep this configuration in place.

Now that the problem is resolved, people connecting to VPN will receive at most 2 DUO push notifications for each login attempt – one immediately and a second one 30 seconds later if the first is not acted on. The total authentication timeout window to complete user/password and DUO 2FA is now 50 seconds.

(READ MORE)

Alert Updates:

ITS has resolved a problem with VPN and DUO authentication that would have impacted people connecting to VPN from about 3:00 am to 10:15 am on Monday, January 11, 2021.

During that time, people connecting to VPN would have experienced between 2 and 5 DUO push notifications in rapid succession and a very quick authentication timeout.

Now that the problem is resolved, people connecting to VPN will receive at most 2 DUO push notifications for each login attempt – one immediately and a second one 30 seconds later if the first is not acted on. The total authentication timeout window to complete user/password and DUO 2FA is now 50 seconds.

Initial Alert:

 


For additional information regarding the outage, please view the After Action Report.

X
Complete your IT Security Awareness Training
As part of Cyber Security Awareness Month, all faculty and staff should have received notice regarding their required annual IT Security Awareness Training. Please see the email from ITS for details or go to MasonLEAPS to complete your training by Monday, November 15.