Re: Student's Own VPN on Campus

[Thomas Carter <tcarter () AUSTINCOLLEGE EDU>]

1)      Also, don’t forget support. Who’s going to help these students install the VPN client or use a VPN portal? What 
happens when they upgrade to the latest version of MacOS the day it is released and that version breaks VPN 
functionality for them?

Thomas Carter
Network & Operations Manager
Austin College

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Scott 
Link
Sent: Monday, September 26, 2016 4:10 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Student's Own VPN on Campus

1. Yes. Lack of control and liability if it's abused or compromised. Will it be in the DMZ? If so, then does the 
student get access to the data center maintain it? (Of course, there's the other scenario of the student bringing you 
the VPN and your team managing it...) If not, then what's the implications of traffic from the Internet terminating in 
a dorm network?
2. No.
I think there was a great discussion last week about granting students VPN access, which goes with this question. If 
there are services that are only available on-campus, then it should be appropriate to grant them access. If there are 
services available to IPs originating on-campus, then a proxy may be the more appropriate tool.


On Mon, Sep 26, 2016 at 3:22 PM, Napier, Mark E <mnapier () indiana edu<mailto:mnapier () indiana edu>> wrote:
The student might risk being locked out of university services that are contractually bound to university IP addresses. 
(Think subscriptions to academic databases managed by the libraries.)

--
Mark E. Napier   MIS, CIPT
Deputy Director of Information Technology /
Chief Information Privacy and Security Officer
School of Informatics and Computing
Indiana University








On Sep 26, 2016, at 4:19 PM, Fisch, Neal <Neal.Fisch () CSUCI EDU<mailto:Neal.Fisch () csuci edu>> wrote:

Good afternoon all,

I’ve received as request from a student who wishes to utilize their own personal VPN on our campus.  My questions to 
the group are:

1.       Do you see any risks to allowing this, and if so what are they?
2.       Do you see any benefits to allowing this and if so what are they?

Thank you for your time.

Neal

Neal Fisch
Director, Enterprise Services and Security
Information Security Officer
Division of Technology & Communication
California State University Channel Islands
One University Drive, Camarillo CA 93012
Solano Hall – Room 2178

Email:  neal.fisch () csuci edu<mailto:neal.fisch () csuci edu>
Voice:  805-437-3278<tel:805-437-3278> | Mobile:  805-443-6529<tel:805-443-6529> | Fax:  805-437-3377<tel:805-437-3377>
<image001.jpg>




--
Scott Link | Manager - Operations Security | Saint Louis University<http://www.slu.edu>
3545 Lindell Boulevard, The Marvin and Harlene Wool Center | T 314-977-9713<tel:314-977-3471>

 [www.slu.edu] <http://www.slu.edu>