Re: [EXTERNAL] [SECURITY] Geoblocking

[James Valente <jvalente () SALEMSTATE EDU>]

I’ve found straight up geoblocking to be a solution that won’t get approved here as we’ve got students from 100+ 
countries currently enrolled, faculty and staff traveling for business and personal use (I’m sending this from China 
currently) and countless potential applicants. Assumptions about any source country could result in students not being 
able to access resources, decreased enrollment, or faculty not being able to complete work if overseas.

If possible, multi factor auth (preferably combined with conditional access if on o365) is a better solution in 
securing accounts without preventing legitimate use. Even if a rollout isn’t something you’d think is easy consider 
pitching it for only logins outside the country or for known “risky” ASNs or IPs


—James

Sent from my iPhone

On Sep 29, 2019, at 03:09, Barton, Robert W. <bartonrt () lewisu edu<mailto:bartonrt () lewisu edu>> wrote:

CAUTION: This email originated from outside of Salem State University. Do not click links or open attachments unless 
you recognize the sender and know the content is safe.
Morning,

As we examine things here, and suffer through the Chegg fallout, we are considering expanding geoblocking 
inbound/outbound traffic to our major offenders.  Yes, we still can end up playing ‘whack-a-mole’ with the bigger 
blocks, but there can be some value in limiting the playing field.  Are any of you using geoblocking at the boarder?  
Inbound, outbound, or both?  It can be a tough subject in higher education, so I’m trying to see who has forged through 
this before us.

Robert W. Barton
Executive Director of Information Security and Policy
Lewis University
One University Parkway
Romeoville, IL  60446-2200
815-836-5663


This message (including any attachments) is intended only for the use of the individual or entity to which it is 
addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from 
disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you 
are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. 
If you have received this communication in error, notify us immediately by telephone at (815)-836-5950 and (i) destroy 
this message if a facsimile or (ii) delete this message immediately if this is an electronic communication. Thank you.

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cjvalente%40SALEMSTATE.EDU%7Cf5eaea62db4a4694ca5e08d744476b14%7C70d32b73b45749d1950c4f78aeffc21b%7C0%7C0%7C637052945837923238&sdata=vjcIY2NQiUTmaXpteWNjU8LIbiI%2FZKm4S7YN%2F%2BYHdQY%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community