51ÂÒÂ×

1.0 Purpose

The purpose of this policy is to provide guidelines for remote access connections to the 51ÂÒÂ× network. Any questions or comments about this policy should be directed to Information Systems.

2.0 Scope

This policy applies to students, faculty, staff or individuals external to 51ÂÒÂ× that utilize remote access connections to the 51ÂÒÂ× internal network.

3.0 Policy

Approved 51ÂÒÂ× employees and authorized third parties (customers, vendors, etc.) may use 51ÂÒÂ×'s VPN or other approved remote access tools, which is a "user managed" service. This means that the user is responsible for selecting an Internet Service Provider (ISP), coordinating installation, installing any required software and paying associated fees.

Users must also abide by the following general guidelines, as well as the VPN Standards.

• It is the responsibility of employees with VPN or remote access privileges to ensure that unauthorized users are not allowed access to 51ÂÒÂ× internal networks.
• VPN gateways and remote access technology will be set up and managed by 51ÂÒÂ× State University Information Systems staff.
• Users of computers that are not 51ÂÒÂ×-owned equipment must configure the equipment to comply with 51ÂÒÂ×’s Remote Access and Network policies.
• Only Information Systems-approved VPN clients and remote access software may be used.
• All remote access to the 51ÂÒÂ× network must utilize multi-factor authentication unless otherwise authorized by Information Systems.

4.0 Enforcement

Anyone found to have violated this policy may be subject to disciplinary action according to personnel policies and procedures. A violation of this policy by a temporary worker, contractor or vendor may result in the termination of their contract or assignment with 51ÂÒÂ×.

5.0 Definitions

Multi-factor Authentication (MFA)

A multi-step account login process that requires users to enter more information than just a password. For example, along with the password, users might be asked to enter a code sent to their email, answer a secret question, etc. MFA always includes at least two different factors containing something you know (password), something you have (phone), something you are (biometrics).

---

Policy adopted:  02-25-2011
Revision adopted:  08-21-2024
Policy approval and adoption: 51ÂÒÂ× President's Office and Information Systems Security