Remote Access - VPN and Virtual Desktops

CU Secure and Multi-Factor Authentication

With the rise in cyber-attacks directed toward university faulty, staff and students, multi-factor authentication (MFA) has been implemented when connecting to campus resources from remote locations. MFA has become one of the best ways to ensure the only person logging into your account is you.

The first two services to begin using MFA for remote access to the university is the virtual private network (VPN) and virtual desktop (VDI) - designed to help protect both your credentials and the university.

Working Off-Campus

If you are working remotely and are accessing the university's network, you have the option of using the VPN or VMware Horizon for remote access. With both options, you will need to authenticate with Duo, our multi-factor authentication app.

Option 1. Virtual Private Network (VPN)

In addition to using your university password to access theVPN, a second authentication method will be required through Duo. To get started using the GlobalProtect VPN service you'll need to be sure you have registered first with Duo Security. 

Download and install the new VPN Palo Alto Global Protect based on the device that you want to use: 
GlobalProtect VPN Download OptionsGlobalProtect Installation Instructions

Install VPN for Windows 64 bit

Windows 64 bit is most common; but, if you're not sure which version to download after reviewing the How-to Guide, contact the service desk.

How-to for Windows

View a short PC instructional video

Install VPN for Mac OS X 10.11 or later


How-to for Mac

View a short Mac instructional video

Download and install the VPN client for your mobile device by going to the Apple App Store or Google Play.  
Install VPN for LinuxHow-to for Linux

Install VPN for Windows 32 bit

Not sure which version to download after reviewing the How-to Guide? Contact the service desk. 

How-to for Windows

View a short PC instructional video

Option 2. Remote Desktop and Applications

This option is designed for temporary sessions. Users must save all files to their personal network drive, the H:\ drive or OneDrive for Business. Be sure to install and register for Duo first before starting the VMware Horizon Client. 

Using GlobalProtect VPN

Tips for using VPN:

After installing and registering with Duo and downloading the VPN client for your selected device, you're ready to use the new VPN!

  • Open the GlobalProtect client on your desktop, laptop, iPad or tablet.

- Windows users will click on the GlobalProtect VPN logo in your task bar (or go to All Programs > Palo Alto Networks > Global Protect).

- Apple computing devices will have an icon that looks like a globe at the top right-hand side. Click on the globe to connect.

  • Enter your primary campus VPN portal, either:  

- CU Denver portal: or 

- CU Anschutz Medical Campus portal:

  • Log in with your network Username (type in your Username, not your email address) and your university Password.
  • Select your preferred authentication method. Each time you log in to VPN, you will have the option to choose an authentication method. Select either Duo Push (recommended), Call Me, or Passcode. You will see a message that you are securely connected to the university network.

* Remember to disconnect form GlobalProtect when you're done with your VPN session.