Because of the risks posed by Virtual Private Network (VPN) access to the University and its students, faculty and staff, Information Technology is formalizing and documenting the VPN request process. Please read the "Information Technology Remote Access and Work from Home Policy" article before completing the VPN Remote Access Request Form.
You will expedite the approval of your request if you observe the following:
1) All VPN connections must originate from La Salle-owned laptop computers or from employee-owned computers meeting specific security standards. Your request will not be approved unless you have provided details necessary to assess the security of your computer. Employees processing High-Risk confidential information (as defined in the attached policy) may be required to use a La Salle-owned computer.
2) Storing confidential data on the computer or portable storage devices such as USB memory sticks is prohibited except in exceptional circumstances. If you propose to store confidential data, you must provide a strong business justification for exposing the University to this risk. Any storage of confidential data requires approval by the Chief Information Security Officer. (Note, however, that storage of confidential data is not the same as processing or viewing confidential data.)
3) Traveling with the computer to parts of Eastern Europe, Asia, or South America exposes the computer to elevated malware risks. You must declare any such travel plans and may be required to have the computer reimaged on your return to the United States.
4) All VPN requests require authorization from your director or dean. If you will be accessing High-Risk confidential information (as defined in the attached Remote Access Policy), authorization from the appropriate vice president or their designated data trustee will also be required.
5) VPN connections expose the University's network and computers to an elevated risk of malware infections which could result in the loss or compromise of sensitive data. Therefore, IT reserves the right to suspend VPN access for any user whose computer shows evidence of malware. If you have any questions,