Educause Security Discussion mailing list archives

Re: VPN policies.


From: "Timothy J. fairlie" <fairlie () RIDER EDU>
Date: Fri, 20 Apr 2007 14:00:02 -0400

At the moment, we provide a VPN client to those that need access from
home. It isn't fun...
Nobody wants to touch an employees home machine anyway, and in some
cases they may want/need client software in addition to the VPN client
to access a resource they need.
We  "encourage" these employees to get laptops, as the VPN is the only
software we'll provide for a home machine.

So even though we've had few problems, when they do come up it's a major
hassle.

This summer we will be moving to an SSL (web-based) VPN, hopefully that
will eliminate the need to provide client software at all.

T..

Timothy J. Fairlie
Director, Network and Communication Services
Rider University            fairlie () rider edu

Matthew Gracie wrote:

Like most institutions, I'm sure, we're getting more and more requests
from people who want access to on-campus resources from off-campus. Our
VPN concentrator is more than up to the task, but right now, we're
discussing the best set of policies to allow people access to work from
home without compromising data.

How are people handling this? Are users accessing VPNs with their
personally owned machines at your institution? Are you mandating laptops
for users who work from home? An entirely different computer that stays
at the employee's house? Who pays for the Internet connection? What
about other hardware (routers, APs, etc.) that they need? Is IT
supplying computers for off-campus use, or is it the job of the department?

Any and all input is appreciated.

--Matt




Current thread: