Re: College Support of VPN on open Wi-Fi

["Corn, Michael" <mcorn () UCSD EDU>]

One thing to consider if you're rethinking your VPN strategy. Include a checkbox somewhere that, if checked, permits 
access to the VPN from overseas. By default it should not be checked. This will provide some protection to accounts 
from abuse since VPNs are frequent targets for use from overseas (esp. for those targeting your library resources).
MC

----------------------
Michael Corn | Chief Information Security Officer
mcorn () ucsd edu
University of California San Diego | ITS - Information Technology Services
10280 N. Torrey Pines Road, Suite 255 | La Jolla CA 92093 MC 0928

________________________________________
From: The EDUCAUSE Security Constituent Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of James Farr 
<jfarr () UTICA EDU>
Sent: Wednesday, October 4, 2017 12:55:29 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] College Support of VPN on open Wi-Fi

We have employees who require access to College resources from off campus. These users request access, go through a 
vetting process, then are provided a College managed VPN solution.

We also have employees who may be traveling and only need College email or cloud storage.  We encourage the use of 
VPN’s on open wireless networks.  We are evaluating what level of support we want to offer employees whose only Wi-Fi 
interactions with college resources are email and cloud storage?  (Box, Google Drive, Microsoft 360,).

Does your institution allow users only checking email or cloud storage to:


·         Connect to College managed VPN with Internet only permission

·         Connect to College managed VPN with access to Internet and restricted access resources

·         Encourage the use a third party VPN service

o   If yes, does the employee or institution pay for this

·         Does the support vary based on device type, (laptop, tablet, smartphone)

·         Other

James Farr ’05 G’12
Director of Information Security and Network Specialist
Utica College
jfarr () utica edu<mailto:jfarr () utica edu>
315-223-2386