Re: Foreign Student Dealing with China's Web Filtering of US Websites

[Frank Barton <bartonf () HUSSON EDU>]

While this isn't something that we have direct experience with... recent
reports are that PRC is blocking TLS 1.3 outright, so your VPN might have
problems

for (1) the difference is full-tunnel vs. split-tunnel VPN

> From a technological perspective, I would go with (2), and have a local (to
you) hosted VM that they use, but keep it isolated from everything else -
assume that it will be compromised by PRC.

I would also recommend talking to your OGC about the ramifications of,
effectively, helping a Chinese national bypass the PRC's great firewall

Frank

On Tue, Aug 25, 2020 at 9:23 AM Bruce Heldman <heldmanb () queens edu> wrote:

> We have a foreign student who’ll be returning to mainland China since our
> Fall semester is online only.   Prior experiences he’s had with the Chinese
> government’s Web filtering suggest he will be blocked from browsing various
> US sites required for his course work.
>
>
>
> Are there any options that would help us with this situation?
>
>
>
> We’ve considered:
>
> 1.      Granting him VPN access, but I believe non-university wouldn’t be
> tunneled.  It would go through his default gateway.
>
> 2.      Assigning him a VDI workstation.  He would then connect to this
> university VDI workstation (with or without VPN) and browse from that
> station.
>
>
>
> Any suggestions or recommendations are appreciated
>
>
>
>
>
>
>
> *Bruce Heldman*
>
> Sr. Director of Technology Infrastructure & Support
>
> Queens University of Charlotte
>
> 1900 Selwyn Avenue
>
> Charlotte, NC  28274
>
> Tel:   704-971-5409
>
>
>
>
>
> **********
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email reply.
> Additional participation and subscription information can be found at
> https://www.educause.edu/community


-- 
Frank Barton, MBA
Security+, ACMT, MCP
IT Systems Administrator
Husson University
PGP Key Fingerprint: 0249DC644EC78D2F6B5CD2C6C94D3EDB57946437

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community