Educause Security Discussion mailing list archives

Re: VPN service -- Quick Poll


From: Julian Y Koh <kohster () NORTHWESTERN EDU>
Date: Fri, 9 Mar 2012 16:15:19 +0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri Mar 09 2012 08:55:11 Central Time, Zahid Mehmood wrote:

Our number one fear for offering something like this is the long term management of this type of setup (access 
control, etc).  How do you manage this?

Our current arrangement has been working fine for just over 5 years now.  After the initial setup, changes are pretty 
infrequent, and we're able to complete virtually all requests within 1 business day.  The whole initial setup can take 
up to a week depending on how much work needs to be done with provisioning LDAP groups, firewall change requests, etc.

Each group has a designated set of individuals who are responsible for managing the group membership, serving as the 
first line of tech support for their users, requesting any changes to resources, and escalating any issues up to us 
that they can't solve.

 Are you using private IP space for this purpose?

Nope.

- -- 
Julian Y. Koh                         <mailto:kohster () northwestern edu>
Manager, Network Transport                         <phone:847-467-5780>
Telecommunications and Network Services         Northwestern University
PGP Public Key:<http://bt.ittns.northwestern.edu/julian/pgppubkey.html>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org

iEYEARECAAYFAk9aLJUACgkQDlQHnMkeAWOA/ACeMoOwnQASDAqGQ/G7S9EI4iR2
SioAmgMYdUAqIhayhKoJQiZP14D7YijS
=trPK
-----END PGP SIGNATURE-----


Current thread: