Duo Two-Factor Authentication is required for Global Protect VPN
Manage your Duo enrollments with DoIT (Information, Guides and FAQ's): Duo Two Factor Authentication – Information Technology (colostate.edu)
Enduser experience and what to expect: Duo 2FA: How to Authenticate – Information Technology (colostate.edu)