What is a VPN?
A VPN (Virtual Private Network) is an option that provides a secure connection between your home computer and the OU network.
Who needs VPN access to the campus?
VPN is designed for secure remote access over the Internet. Not every application or customer needs this security. Customers that are checking their mail via Outlook Web Access or that are accessing public University web servers do not need a VPN client.
Customers that need secure remote access to sensitive or restricted data systems will need the VPN client.
Federal regulations such as HIPAA privacy and security rules require creation of authorization and authentication procedures as well as a tracking database for access to systems that contain sensitive data such as patient identifiable records. We will provide VPN access to other resources when these issues have been addressed.
We are currently evaluating the different types of access and what mechanisms will be used to determine appropriate access.
How secure is the VPN?
A VPN session authenticates the user and encrypts traffic between the client and the VPN concentrator. Authentication is as secure as the authentication method, in this case User ID/password. Encryption used is 128 bits strong and is very difficult to break. Probably the greatest vulnerability to our network is the inherent lack of security on most remote workstations.
At least two steps need to be taken to help reduce the risk.
- Standardize VPN workstation configuration to include Up-to-date antivirus and some type of personal firewall. Personal firewall software or a hardware device is recommended when connecting via cable modem or DSL. Because these devices are "always on" and have a permanent connection, they are more susceptible to hacking. If your home computer is compromised and then connects to the University network as a trusted host, the University systems can be compromised. At this time we do not endorse a specific product but some examples of personal firewall software products are ZoneAlarm and Black Ice Defender.
- Implement network Intrusion Detection Software to scan incoming VPN traffic.
Can I use SoonerConnect for personal use?
Yes, but you should close your VPN connection when you are not using the University network. When using the VPN to access University resources, the University's Acceptable Use Policy is in effect (Here is the OUHSC Acceptable Use Policy).
Your ISP's Acceptable Use Policies apply when you are not using the VPN. Please check your ISP's web page for their policies.
Who do I call when I have problems with my connection?
For problems with the initial setup of a Cox cable modem you should call Cox at 405-600-FAST (3278) (M-F 8am-5pm). After 5pm and on weekends call Cox at 405-600-8282.
For problems with the initial setup of SBC DSL call Southwestern Bell at 800-638-4357.
For VPN related issues you should call the IT HelpDesk at 405-271-0852 (M-F 8am-5pm).
Can I use another ISP besides Cox or SBC and still access the VPN?
Yes, but this is dependent on your ISP. Some ISP's block VPN traffic. The University of Oklahoma has contracted with Cox and SBC to allow VPN service. Also the VPN can be used with the campuses' dial-up modem services.
If you are using another ISP and you are having problems using the VPN, please contact your ISP to verify that they allow VPN traffic.
Can I connect to the VPN from another country?
Possibly, export restrictions on encryption technology change almost daily. If you have a need to use the VPN internationally please contact the IT HelpDesk at 405-271-0852.
What desktop platforms can I use with the VPN?
At this time, the University's VPN client fully supports Windows 2000, XP Professional and Vista Business (or above).
Please keep checking the VPN Info and Client Download page for updates.
|
|
