Restricted Regions - No Duo Service

Duo usage restricted in certain regions under U.S. sanctions.

In order to comply with U.S. regulations, the campus two-step login provider, Duo Security, has begun blocking authentications from users whose IP (Internet Protocol) address originates in a country or region subject to economic and trade sanctions enforced by the U.S. Office of Foreign Assets Control (OFAC). 

On April 14, 2022, Duo started blocking:

• Crimea region
• Donetsk region
• Luhansk region
• Sevastopol region

On May 5, 2022, Duo started blocking: 

• Cuba
• Iran
• North Korea
• Sudan
• Syria

Students, staff and faculty operating in the above regions and countries should take note of the restrictions. More information is available in a knowledge base article on the Duo website. 

Individuals traveling professionally to these areas should generally assume that UC online resources will not be available to them. If you would like a consultation on digital security while in such areas, please contact security@ucsd.edu. Students are advised to immediately contact their academic unit.

Please note the following about the user experience in restricted regions:

• If you're attempting to access a web-based application, you'll receive an error message. However, other applications, such as the campus VPN, will fail without providing the user any feedback. 
• UC San Diego is unable to provide a workaround to this prohibition.
• It applies to all uses of Duo two-step login (app push, phone call, sms, code, or token).
• The restriction is based on location, not identity. In other words, citizenship doesn't matter; if your login attempt originates in a prohibited location, it will be blocked.
• Users who are in a blocked region or country will not be blocked when they enter another country or return to the United States.