Purpose:
The purpose of this policy is to provide guidelines for remote access Virtual Private Network (VPN) connections to Northeastern State University (NSU).

Scope:
This policy applies to all NSU authorized users including all personnel affiliated with third parties utilizing NSU’s VPN to access NSU’s private network. 

Definition:
VPN is a virtual private network that uses a public network to connect remote sites or users. VPN access device is a device in which VPN connections are terminated.
User Authentication is a method by which a user can be verified as a legitimate user.
Secure Socket Layer (SSL) is a cryptographic protocol which provides secure communications on the Internet.

Policy:
All valid NSU users are permitted access through VPN.  VPN is a “user managed” service.  This means that the user is responsible for selecting an Internet Service Provider (ISP), coordinating installation, installing any required software, and pay associated fees.

VPN access is provided by Computing & Telecommunications Department.   No other department may implement VPN services. 

VPN access is controlled with a NSU user account and password.  These are assigned after the user accepts Acceptable Use Policy.

All computers connected to the NSU network via VPN must have anti-virus software and all the latest operating systems updates installed.  All computers will be scanned for compliance with Network Access Control (NAC) agent prior to establishing a secure connection. 

VPN users will be automatically disconnected from the NSU network after thirty minutes of inactivity.  The user must then logon again to reestablish the connection.

By using VPN technology with personal equipment, users must understand that their machines are a de facto extension of the NSU network, and as such are subject to the same rules and regulations that apply to NSU-owned equipment, i.e., their machines must be configured to comply with all NSU network access polices.