Educause Security Discussion mailing list archives

Re: VPN service -- Quick Poll (split tunneling?)


From: Julian Y Koh <kohster () NORTHWESTERN EDU>
Date: Fri, 9 Mar 2012 20:29:31 +0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri Mar 09 2012 14:25:52 Central Time, Kris Monroe wrote:

For those that have answered yes, would you mind outlining whether you
allow split tunneling or not? I would also appreciate your rationale one
way or the other.

We do not use split tunneling on our traditional VPN service.  We originally tried to do it back in 2000 in the 
interest of bandwidth conservation, but given the huge number of off-campus resources (primarily from the Library) that 
were restricted to our IP address space, this quickly became unmanageable.  

For our SSL VPN service, given its targeted and customized nature, we went back to split tunneling.

- -- 
Julian Y. Koh                         <mailto:kohster () northwestern edu>
Manager, Network Transport                         <phone:847-467-5780>
Telecommunications and Network Services         Northwestern University
PGP Public Key:<http://bt.ittns.northwestern.edu/julian/pgppubkey.html>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org

iEYEARECAAYFAk9aaCwACgkQDlQHnMkeAWODCQCg9wULYLKVja3TV7Q0dgjEcZE8
AnIAoIW9She8+BQsnAdgU3Zzn2+ZuWfk
=Yxc9
-----END PGP SIGNATURE-----


Current thread: