Re: [EXT] [SECURITY] Foreign Student Dealing with China's Web Filtering of US Websites

[Michael Cole <mcole () CLARKU EDU>]

If you use split tunneling on the vpn connection, the non university destined traffic would go out the hosts local 
internet connection, so if they're blocking that resource they wouldn't get there.  The other option there is to set up 
a vpn that doesn't use split tunneling and all the traffic comes to you.

VDI should work if they can get to it from China, or if you have a lab off line, vpn and rdc to a lab computer

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Bruce Heldman
Sent: Tuesday, August 25, 2020 9:13 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [EXT] [SECURITY] Foreign Student Dealing with China's Web Filtering of US Websites

We have a foreign student who'll be returning to mainland China since our Fall semester is online only.   Prior 
experiences he's had with the Chinese government's Web filtering suggest he will be blocked from browsing various US 
sites required for his course work.

Are there any options that would help us with this situation?

We've considered:

  1.  Granting him VPN access, but I believe non-university wouldn't be tunneled.  It would go through his default 
gateway.
  2.  Assigning him a VDI workstation.  He would then connect to this university VDI workstation (with or without VPN) 
and browse from that station.

Any suggestions or recommendations are appreciated



Bruce Heldman
Sr. Director of Technology Infrastructure & Support
Queens University of Charlotte
1900 Selwyn Avenue
Charlotte, NC  28274
Tel:   704-971-5409



**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cmcole%40CLARKU.EDU%7C61fccb87c43546d7056308d848fa076a%7Cb5b2263d68aa453eb972aa1421410f80%7C0%7C0%7C637339585989842344&sdata=k4xsuTBwyNSjFmSvzYRbpoP3ooXroUSnBWx25%2FDB9k4%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community