Duke has rolled out specific security requirements for access to the DHE networks. If you use VPN on a personal machine and need to connect to DHE servers ( ie: munin, cluster, etc ) then you are expected to meet specific requirements.
1) Device registered with NAC : NAC Registration
2) Have the NAC agent installed on your local computer
3) Have an approved anti-virus software ( crowdstrike is preferred )
4) Have an approved operating system version
You can read more about NAC here : https://nac.dhts.duke.edu/network-access-control-nac
1) Download and install the FortiNAC Agent
Windows | OSX | Linux |
---|---|---|
FortiNAC.exe | FortiNAC.dmg | RHEL of Debian |
2) Find your WiFi Mac Address - Mac : System Preferences → Network → Wi-Fi → Advanced Button → Hardware Tab - Windows : Control Panel > Network and Internet > Network and Sharing Center → Network Connection → Click Details → Physical Address
3) Register your device at : NAC Registration
4) Install an approved anti-virus software:
Microsoft Windows | Mac OSX |
---|---|
Avast | Avast |
Microsoft Windows Defender, built in Windows 10 | Bitdefender |
AVG-2019 free |
5) Approved Operating System versions:
Microsoft Windows | Mac OSX |
---|---|
Windows 8 | 11.0-Big Sur |
Windows 10 | 12.0-Monterey |
Connect to VPN, then open a browser and go to a Duke Site to verify.
Note that sometimes it takes a few seconds between launching the VPN and NAC verification, so if you try to immediately connect to a DHE server you may still be in a remediation network zone. Give it a few more seconds, or potentially reconnect to VPN if needed.
While on campus all NAC requirements above must be met to join the secured DH1 wireless network, which replaces clubs:
* NAC DH1 wireless
* please follow instructions for user-managed devices