Educause Security Discussion mailing list archives

Re: [EXTERNAL] [SECURITY] SecureLink vs VPN for privileged vendor access


From: Gene LeDuc <gleduc () SDSU EDU>
Date: Fri, 24 May 2019 13:34:29 -0700

We've been using SecureLink for vendor access for a few years and are pretty happy with it. It is on the pricey side, though. My users really like the ability to replay RDP and SSH sessions so they can see what kind of pixie dust the vendor uses to fix the problem. We only allow campus-affiliated users to have VPN access.

Gene

On 5/24/19 11:55 AM, Colin Abbott wrote:
Hi,

  As part of our Banner 9 transformation project we are engaging with Ellucian professional services to provide some support. Their new model is that they are refusing to use a client’s VPN and instead forcing the clients to use SecureLink. (https://www.securelink.com/)

A quick look at SecureLink it looks pretty interesting, especially the level of audit and notifications when vendors access your systems.

Is anyone using this with Ellucian or has anyone implemented it as a solution for vendor access? Has anyone already done an in-depth security assessment of the product?

Thanks

Colin Abbott, CISSP, CCSP | IT Security Architect  | McGillUniversity | Network and Communication Services| 514-398-5070


--
Gene LeDuc                 | You can tell the greatness of a man by
Technology Security        | what makes him angry.
San Diego State University |   --Abraham Lincoln


Current thread: