{"id":92,"date":"2019-04-25T15:37:00","date_gmt":"2019-04-25T15:37:00","guid":{"rendered":"https:\/\/www.stmarytx.edu\/policies\/?post_type=itsp&#038;p=92"},"modified":"2024-07-12T17:53:15","modified_gmt":"2024-07-12T17:53:15","slug":"vpn-access","status":"publish","type":"it-services","link":"https:\/\/www.stmarytx.edu\/policies\/it-services\/vpn-access\/","title":{"rendered":"VPN Access"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Summary<\/h2>\n\n\n\n<p>Secure remote access to the University\u2019s network is essential for maintaining the integrity and confidentiality of our data. A Virtual Private Network (VPN) provides a secure encrypted network connection over the Internet between authorized St. Mary\u2019s University users and the University internal network. This policy outlines the guidelines and procedures for authorized users to connect to the University\u2019s network remotely. By adhering to this policy, we ensure that all VPN connections are secure, encrypted, and used solely for university-related activities, thereby protecting our network from unauthorized access and potential security threats.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Purpose<\/h2>\n\n\n\n<p>The use of this service is designed to facilitate secure remote access to the campus network, in alignment with the University\u2019s goals and mission. When a system connects remotely to the network via VPN, it effectively becomes an extension of the campus network and is subject to the same policies and regulations as any system directly connected to the campus.<\/p>\n\n\n\n<p>This service is provided at no cost and exclusively to authorized users, limited to university-owned devices.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Scope<\/h2>\n\n\n\n<p>The Virtual Private Network (VPN) is a service provided by Information Services for authorized faculty, staff, contractors, consultants, and authorized third-party guests using VPNs to access the St. Mary\u2019s University campus network (hereafter referred to as \u201cusers\u201d).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Policy<\/h2>\n\n\n\n<p>Authorized St. Mary\u2019s University users may utilize the benefits of VPNs, which are a &#8216;user-managed&#8217; service. This means that the user is responsible for selecting an Internet Service Provider (ISP), coordinating installation, installing any required software, and paying associated fees.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Guidelines<\/h2>\n\n\n\n<ul class=\"no-bullets wp-block-list\">\n<li class=\"smallPad\"><strong>Request Process and Approval: <\/strong>VPN accounts are available to St. Mary\u2019s University users upon official request for authorization.<\/li>\n\n\n\n<li class=\"smallPad\"><strong>Device Usage Restrictions: <\/strong>VPN usage is restricted to university or company-owned devices, including those owned by third-party vendors contracted by the University. Users may not use personal devices to connect to the VPN.<\/li>\n\n\n\n<li class=\"smallPad\"><strong>User Responsibility for Access Control: <\/strong>VPN users are responsible for ensuring that unauthorized individuals do not gain access to the University\u2019s internal network. Users must take appropriate action if they suspect or detect unauthorized access.<\/li>\n\n\n\n<li class=\"smallPad\"><strong>Security Measures for Connected Devices: <\/strong>All computers connected to the University\u2019s internal network via VPN must have up-to-date antivirus software and operating system patches. The university periodically scans connected computers to ensure compliance, and devices identified as potential security threats may be blocked from the network until corrective action is taken.<\/li>\n\n\n\n<li class=\"smallPad\"><strong>Inactivity Disconnection Policy: <\/strong>VPN users will be automatically disconnected from the University\u2019s network after thirty (30) minutes of inactivity. Users must then log in again to reconnect to the network. This measure helps ensure network resources are efficiently utilized and reduces the risk of unauthorized access due to prolonged inactivity.<\/li>\n\n\n\n<li class=\"smallPad\"><strong>Approved VPN Client Software<\/strong>: The approved VPN client software is <a href=\"https:\/\/www.fortinet.com\/support\/product-downloads#vpn\">FortiClient VPN<\/a>, available for Windows, Mac OS, and iOS. St. Mary\u2019s University users must contact the Technical Support Center (TSC) for proper installation or updates. Authorized third parties are responsible for downloading and installing the VPN software on their devices.<\/li>\n\n\n\n<li class=\"smallPad\"><strong>Single Connection Limitation<\/strong>: Only one active VPN connection is allowed per user.<\/li>\n\n\n\n<li class=\"smallPad\"><strong>Two-Factor Authentication (2FA) with FortiToken Mobile (FTM): <\/strong>VPN users will be assigned a unique token for FortiToken Mobile (<em>FTM an event-based and time-based One-Time Password (OTP) generator application for mobile devices<\/em>). FTM, in conjunction with login credentials, provides an added layer of protection by generating time-based authentication codes.<\/li>\n\n\n\n<li class=\"smallPad\"><strong>VPN Access for Sponsored Third Parties: <\/strong>St. Mary\u2019s University-sponsored third parties, such as software consultants or support personnel, must be sponsored by a department to gain VPN access. Additionally, third parties must complete and sign the Confidential Information Agreement and comply with the Third-Party Vendor Access Policy.<\/li>\n\n\n\n<li><strong>Annual VPN Access Review: <\/strong>VPN access will be reviewed annually to ensure compliance with security policies and procedures.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Enforcement<\/h2>\n\n\n\n<p>Violation of this policy may result in the <strong>termination of the user\u2019s VPN privileges<\/strong>. Users found in violation may face sanctions, including the loss of computer or network access privileges, disciplinary action, suspension, termination of employment, and legal action.<\/p>\n\n\n\n<p>Certain violations may also constitute criminal offenses under local, state, and federal laws. The University will fulfill its responsibility to report such violations to the appropriate authorities.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Definitions<\/h2>\n\n\n\n<ul class=\"padBottom wp-block-list\">\n<li><strong>Confidential Information Agreement:<\/strong> A document that third-party vendors must complete and sign to gain VPN access, outlining their commitment to confidentiality.<\/li>\n\n\n\n<li><strong>VPN (Virtual Private Network):<\/strong> A service that allows approved St. Mary\u2019s University users and authorized third parties to securely connect to the University&#8217;s internal network over the internet.<\/li>\n<\/ul>\n","protected":false},"featured_media":0,"parent":0,"menu_order":0,"template":"","class_list":["post-92","it-services","type-it-services","status-publish","hentry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>VPN Access - Policy Library<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.stmarytx.edu\/policies\/it-services\/vpn-access\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"VPN Access - Policy Library\" \/>\n<meta property=\"og:description\" content=\"Summary Secure remote access to the University\u2019s network is essential for maintaining the integrity and confidentiality of our data. A Virtual Private Network (VPN) provides a secure encrypted network connection over the Internet between authorized St. Mary\u2019s University users and the University internal network. This policy outlines the guidelines and procedures for authorized users to [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.stmarytx.edu\/policies\/it-services\/vpn-access\/\" \/>\n<meta property=\"og:site_name\" content=\"Policy Library\" \/>\n<meta property=\"article:modified_time\" content=\"2024-07-12T17:53:15+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.stmarytx.edu\\\/policies\\\/it-services\\\/vpn-access\\\/\",\"url\":\"https:\\\/\\\/www.stmarytx.edu\\\/policies\\\/it-services\\\/vpn-access\\\/\",\"name\":\"VPN Access - Policy Library\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.stmarytx.edu\\\/policies\\\/#website\"},\"datePublished\":\"2019-04-25T15:37:00+00:00\",\"dateModified\":\"2024-07-12T17:53:15+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.stmarytx.edu\\\/policies\\\/it-services\\\/vpn-access\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.stmarytx.edu\\\/policies\\\/it-services\\\/vpn-access\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.stmarytx.edu\\\/policies\\\/it-services\\\/vpn-access\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.stmarytx.edu\\\/policies\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Information Services\",\"item\":\"https:\\\/\\\/www.stmarytx.edu\\\/policies\\\/it-services\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"VPN Access\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.stmarytx.edu\\\/policies\\\/#website\",\"url\":\"https:\\\/\\\/www.stmarytx.edu\\\/policies\\\/\",\"name\":\"Policy Library\",\"description\":\"Official policies of St. Mary&#039;s University\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.stmarytx.edu\\\/policies\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"VPN Access - Policy Library","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.stmarytx.edu\/policies\/it-services\/vpn-access\/","og_locale":"en_US","og_type":"article","og_title":"VPN Access - Policy Library","og_description":"Summary Secure remote access to the University\u2019s network is essential for maintaining the integrity and confidentiality of our data. A Virtual Private Network (VPN) provides a secure encrypted network connection over the Internet between authorized St. Mary\u2019s University users and the University internal network. This policy outlines the guidelines and procedures for authorized users to [&hellip;]","og_url":"https:\/\/www.stmarytx.edu\/policies\/it-services\/vpn-access\/","og_site_name":"Policy Library","article_modified_time":"2024-07-12T17:53:15+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.stmarytx.edu\/policies\/it-services\/vpn-access\/","url":"https:\/\/www.stmarytx.edu\/policies\/it-services\/vpn-access\/","name":"VPN Access - Policy Library","isPartOf":{"@id":"https:\/\/www.stmarytx.edu\/policies\/#website"},"datePublished":"2019-04-25T15:37:00+00:00","dateModified":"2024-07-12T17:53:15+00:00","breadcrumb":{"@id":"https:\/\/www.stmarytx.edu\/policies\/it-services\/vpn-access\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.stmarytx.edu\/policies\/it-services\/vpn-access\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.stmarytx.edu\/policies\/it-services\/vpn-access\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.stmarytx.edu\/policies\/"},{"@type":"ListItem","position":2,"name":"Information Services","item":"https:\/\/www.stmarytx.edu\/policies\/it-services\/"},{"@type":"ListItem","position":3,"name":"VPN Access"}]},{"@type":"WebSite","@id":"https:\/\/www.stmarytx.edu\/policies\/#website","url":"https:\/\/www.stmarytx.edu\/policies\/","name":"Policy Library","description":"Official policies of St. Mary&#039;s University","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.stmarytx.edu\/policies\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/www.stmarytx.edu\/policies\/wp-json\/wp\/v2\/it-services\/92","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.stmarytx.edu\/policies\/wp-json\/wp\/v2\/it-services"}],"about":[{"href":"https:\/\/www.stmarytx.edu\/policies\/wp-json\/wp\/v2\/types\/it-services"}],"version-history":[{"count":0,"href":"https:\/\/www.stmarytx.edu\/policies\/wp-json\/wp\/v2\/it-services\/92\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.stmarytx.edu\/policies\/wp-json\/wp\/v2\/media?parent=92"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}