Educause Security Discussion mailing list archives

Re: College Support of VPN on open Wi-Fi


From: Valdis Kletnieks <valdis.kletnieks () VT EDU>
Date: Thu, 5 Oct 2017 17:56:52 -0400

On Wed, 04 Oct 2017 23:44:35 -0000, "Corn, Michael" said:
One thing to consider if you're rethinking your VPN strategy. Include a check
box somewhere that, if checked, permits access to the VPN from overseas. By
default it should not be checked. This will provide some protection to accounts
from abuse since VPNs are frequent targets for use from overseas (esp. for
those targeting your library resources).

Also make plans for how to deal with people that travel to California, or across
the state, and errant Geo-IP suddenly decides they're outside the US. Make sure
that your help desk is able to deal with these glitches *AND* that the procedure
is at least somewhat social engineering proof....

(Yes, I know that last part is a challenge involving tradeoffs ... :)

Attachment: _bin
Description:


Current thread: