Educause Security Discussion mailing list archives
Re: College Support of VPN on open Wi-Fi
From: Valdis Kletnieks <valdis.kletnieks () VT EDU>
Date: Thu, 5 Oct 2017 17:56:52 -0400
On Wed, 04 Oct 2017 23:44:35 -0000, "Corn, Michael" said:
One thing to consider if you're rethinking your VPN strategy. Include a check box somewhere that, if checked, permits access to the VPN from overseas. By default it should not be checked. This will provide some protection to accounts from abuse since VPNs are frequent targets for use from overseas (esp. for those targeting your library resources).
Also make plans for how to deal with people that travel to California, or across the state, and errant Geo-IP suddenly decides they're outside the US. Make sure that your help desk is able to deal with these glitches *AND* that the procedure is at least somewhat social engineering proof.... (Yes, I know that last part is a challenge involving tradeoffs ... :)
Attachment:
_bin
Description:
Current thread:
- College Support of VPN on open Wi-Fi James Farr (Oct 04)
- Re: College Support of VPN on open Wi-Fi Corn, Michael (Oct 04)
- Re: College Support of VPN on open Wi-Fi Valdis Kletnieks (Oct 05)
- Re: College Support of VPN on open Wi-Fi Johnson, Matthew (Oct 06)
- Re: College Support of VPN on open Wi-Fi McClenon, Brady (Oct 06)
- Re: College Support of VPN on open Wi-Fi Kevin Crider (Oct 06)
- Re: College Support of VPN on open Wi-Fi Frank Barton (Oct 07)
- Re: College Support of VPN on open Wi-Fi Kevin Crider (Oct 07)
- Re: College Support of VPN on open Wi-Fi Valdis Kletnieks (Oct 05)
- Re: College Support of VPN on open Wi-Fi Corn, Michael (Oct 04)