At CSU, the application called Duo Security is used to provide a second piece of information via mobile app or phone call. Two-factor authentication (2FA) is the process of adding an additional piece of information, so that a password alone is not enough to access a protected resource. At CSU, this set of credentials is normally your eID: a name and password allowing you to access central services such as email, RamWeb, and HR. Credentials used for authentication include a username, which identifies you uniquely, and some sort of an authentication token to prove that you are the person the username refers to.

If you have questions or feedback on Microsoft Defender or endpoint security use cases, please contact the Information Security Office: & Two-Factor AuthenticationĪuthentication is the process of identifying yourself to an application. Additionally, ACNS has been piloting the use of Microsoft Defender ATP (Advanced Threat Protection), and will be communicating with the CSU IT community about the campus-wide roll-out of this enhanced protection. The Information Security Office recommends the use of Microsoft Defender for the protection of university-managed devices when compatible. In addition, Malwarebytes should not be registered on any computer using an email address unless a license has been purchased. Unless departments or units have purchased a valid license for Malwarebytes, it should be removed from all machines that are being used in support of university business.

We’ve been advised by the cybersecurity company Malwarebytes that there may be unlicensed installations of their Malwarebytes anti-malware software on CSU-owned systems.

Pulse secure client will not install