Remote access and data offloads.

[Doug Sandford <dsandfor () SEEBECK UA EDU>]

Does anyone have a workable institutional poly regarding remote
desktop access versus VPN? We want to put something together that
'encourages' the use of a VPN connection that permits a degree of
accountability. Although our Acceptable Use Policy addresses
University data in all forms as just that, we would like to reiterate
that issue of downloading institutional data to home computers etc.

While a VPN without content filtering in some form is not the answer
to unauthorized downloads, we feel it at least offers some degree of
accountability for 'who-was-where-and-when'.

Thanks in advance for some direction.


Doug Sandford
Information Security Officer
University of Alabama
Seebeck Computer Center
doug () ua edu

This email is intended only for the person to whom it is
addressed.  Any review or other use of this information by
persons or entities other than the intended recipient or any
retransmission without the consent of the sender is prohibited.