02/01/2023
By Alysha Elliard

Information Technology has a few upcoming changes to let you know about.

Duo Mobile 

Beginning Feb. 8, we will be implementing Duo Verified Push; offering an additional layer of verification by requiring you to enter a three-digit code that will pop up on up your phone as part of a push notification to approve the authentication request.

  • Why are we changing Duo? Asking that you pause and enter a three-digit code instead of simply clicking a check mark allows for a more thoughtful consideration of what UMass Lowell application you are actively authenticating. 
  • Over the last several months, cyber criminals have started using user-exhaustion attacks called “MFA fatigue” or “MFA harassment” to wear down a user to accept one of several push notifications. By using a three-digit verification code, we can further ensure only verified users are able to log in, and prevent someone from accidentally accepting a push they did not request.
  • By deploying this new authentication method as part of Duo’s adaptive policies, we can harden our device enrollment process, secure sensitive applications, and protect the campus against the latest techniques from cyber adversaries.

SiS Login
This past summer we updated the login screen for HR Direct and Finance. Starting on Feb. 15, the same login process will be applied to SiS. The links that you see on the SiS website will be updated automatically, but we suggest that you update any bookmarks or quick links that you may have on your own browser or desktop.

NAC (Network Admission Control) 
NAC is a new security initiative from Information Technology to improve data gathering, network security, and asset management. Up to this point, anyone could connect a device into the UMass Lowell network and get online. The NAC project is the next evolution of network security to protect the university’s valuable information and assets.

  • How does NAC work?
    All devices connected to the network with a physical wired cable will need to be pre-registered via the My Devices portal before they can get connected.
    *NOTE: This does not apply to the WiFi network (where all connections are already registered). If you’re using WiFi, your connection will remain unchanged.
  • When does this happen?
    We piloted this system in November in two campus buildings and it worked extremely well. We are targeting a campus-wide implementation on April 11, 2023. You may register your devices at any time, and they will need to be renewed annually starting in July of 2024. Don’t worry, we’ll send you a reminder email - or probably a bunch.
  • What do I need to do?
    You’ll need to find the unique network identifier on your computer (called a “MAC address”) and register it on the My Devices portal – the entire process only takes a few minutes. You’ll need to do this for your computer, as well as any other devices that may be physically connected to the network (remember…if you’re using WiFi, you don’t need to do anything). Please note that devices like desk phones, classroom technology, computer labs, etc., will be loaded into the system and managed by IT and should not be registered as your own device in the portal. If you have questions about a device, please contact Marcie_Byrd@uml.edu
  • Where can I get more information?
    You can refer to this page for more information on finding your MAC address and registering it on the web portal.