Remote User Access to SystemsNOTE: Vista and Windows 7 64 bit VPN client. A new version is now available to Vista and Win7 users.
Remote access to the University’s network, servers, administrative applications, and all computer resources creates a special security situation. Remote access includes the use of remote desktop control tools such as XP’s Remote Access Sharing and VPN. VPN access extends the wwu.edu network to remote locations such as connecting regional campuses. When an employee uses remote access they must understand the following issues:
Because of necessary security measures, the following areas are not
permitted remote access: wireless connections, lab connections, and public areas.
Remote access will not be provided to all employees as a default.
To get remote access an employee must request that access (using the “Remote Access Request” E-sign Form") and have it approved by the employee’s department head. [Once approved, ITS would then turn on remote desktop sharing for that employee's login ID.]
When accessing Western’s computer resources remotely the employee is operating as an employee of the University. Appropriate use is the same as if the employee was working in their office for the University.
Student employees are not permitted emote access to departmental workstations. Departments that have a full-time employee sharing the same workstation with a student employee should not as a rule, authorize remote access to that workstation. If remote access to that workstation is needed for a full-time employee then the student employee is NOT to be provided their administrative (Banner) password.
Workstation security becomes even more important
when that workstation has remote desktop access activated. Departments should
configure department workstations as follows:
Require hardened passwords (8 characters without words and with at least one number or special character)
Require password protection on the screen saver.
INSTALLING THE BANNER 7 SECURITY