Re: Student's Own VPN on Campus

[Thomas Dixon <thomas.dixon () CSUEASTBAY EDU>]

Hi Neal,

The other thing that comes to mind is what assurances would you have that
the student wouldn't allow other people use of his VPN connection?

-Thomas Dixon
Information Security Officer
CSU East Bay

On Sep 26, 2016 2:28 PM, "Thomas Carter" <tcarter () austincollege edu> wrote:

1)      Also, don’t forget support. Who’s going to help these students
install the VPN client or use a VPN portal? What happens when they upgrade
to the latest version of MacOS the day it is released and that version
breaks VPN functionality for them?



Thomas Carter

Network & Operations Manager

Austin College



*From:* The EDUCAUSE Security Constituent Group Listserv [mailto:
SECURITY () LISTSERV EDUCAUSE EDU] *On Behalf Of *Scott Link
*Sent:* Monday, September 26, 2016 4:10 PM
*To:* SECURITY () LISTSERV EDUCAUSE EDU
*Subject:* Re: [SECURITY] Student's Own VPN on Campus



1. Yes. Lack of control and liability if it's abused or compromised. Will
it be in the DMZ? If so, then does the student get access to the data
center maintain it? (Of course, there's the other scenario of the student
bringing you the VPN and your team managing it...) If not, then what's the
implications of traffic from the Internet terminating in a dorm network?

2. No.

I think there was a great discussion last week about granting students VPN
access, which goes with this question. If there are services that are only
available on-campus, then it should be appropriate to grant them access. If
there are services available to IPs originating on-campus, then a proxy may
be the more appropriate tool.



On Mon, Sep 26, 2016 at 3:22 PM, Napier, Mark E <mnapier () indiana edu> wrote:

The student might risk being locked out of university services that are
contractually bound to university IP addresses. (Think subscriptions to
academic databases managed by the libraries.)



--

Mark E. Napier   MIS, CIPT

Deputy Director of Information Technology /

Chief Information Privacy and Security Officer

School of Informatics and Computing

Indiana University

















On Sep 26, 2016, at 4:19 PM, Fisch, Neal <Neal.Fisch () CSUCI EDU
<Neal.Fisch () csuci edu>> wrote:



Good afternoon all,



I’ve received as request from a student who wishes to utilize their own
personal VPN on our campus.  My questions to the group are:



1.       Do you see any risks to allowing this, and if so what are they?

2.       Do you see any benefits to allowing this and if so what are they?



Thank you for your time.



Neal



Neal Fisch

Director, Enterprise Services and Security

Information Security Officer

Division of Technology & Communication

California State University Channel Islands

One University Drive, Camarillo CA 93012

Solano Hall – Room 2178



Email:  neal.fisch () csuci edu

Voice:  805-437-3278 *|* Mobile:  805-443-6529 *|* Fax:  805-437-3377

<image001.jpg>






-- 

Scott Link | Manager - Operations Security | Saint Louis University
<http://www.slu.edu>

3545 Lindell Boulevard, The Marvin and Harlene Wool Center | T 314-977-9713
<314-977-3471>

 [image: www.slu.edu] <http://www.slu.edu>