Skip to main content

JSU CYBER AWARENESS

ACCEPTABLE USE POLICY: VIRTUAL PRIVATE NETWORK

 

Abstract: 
JSU must establish rules and operating parameters for JSU employees and third party vendors’ access to University critical information, their operator responsibilities, and protection of Jackson State University’s assets, data, and PII.

Policy Number: 50000.011
Effective Date: 3/19/2019
Review/Revised Date: 4/13/2023 
Category: Information Technology
Policy Owner: CIO/Information Technology
Policy Contact: CISO/Information Technology

 

Policy Statement

The establishment of this policy and procedures sets the standards for the usage of Remote Access Virtual Private Network (VPN) connections by Jackson State University employees.

 Purpose

The purpose of this policy is to provide guidelines for Remote Access Virtual Private Network (VPN) connections to the Jackson State University (JSU) network.

Definitions

Virtual Private Network (VPN) – a secured private network connection built on top of a public network, such as the internet.

Internet Service Provider (ISP) –  a company that provides Internet connections and services to individuals and organizations.

Net ID – a Network Identifier (NetID) number used to access university resources (ie. CANVAS, Xerox Copiers)

Employee Adherence

This policy applies to all JSU faculty and staff utilizing a VPN to access the JSU network. This policy also applies to implementations of VPN that allow direct access to the JSU network. Any user(s) who are not considered an active JSU employee will not be allowed to use JSU’s VPN provided services to directly access the JSU network without JSU’s approval or authorization. 

 Policy

Approved JSU faculty and staff may utilize the benefits of a VPN, which is a “user-managed” service to only perform business relate job duties and tasks as required by their JSU job role. This means that the user is responsible for selecting an ISP, coordinating installation, and installing the required software.

 Implementation

  • The VPN is an IP only resource. Other protocols are not supported.
  • It is the responsibility of the employee with VPN privilege to ensure that unauthorized users are not allowed access to the JSU network.
  • VPN access is controlled using ID and password authentication. For Faculty and Staff, the ID is their Net ID and Password.
  • All traffic destined for JSU networks is logged and associated with the user, as permitted.
  • Only traffic destined for JSU networks will travel across the VPN tunnel, all other traffic will go through the user’s ISP.
  • Users of this service are responsible for the procurement and cost associated with acquiring basic internet.
  • Users request access via VPN access form and email and receive instructions to download the VPN client software and activate your VPN access.
  • Users must have an active anti-virus software on the machine they are using to access JSU’s VPN.
  • Only approved JSU employees are given access to the JSU VPN and those credentials are not to be shared.
  • Any unauthorized access to the JSU VPN by a user who is NOT a JSU employee but found using employee credentials is subject to loss of VPN access up to termination of employment.
  • Cisco AnyConnect is providing the VPN service and the service is supported by the Division of Information Technology Office of Computing and Communications.
  • If a problem is encountered please report it to the by phone (601-979-6400) or by e-mail to umesh.r.reddy@jsums.edu, with the following information available:
    • Net ID
    • Date and time of problem
    • Any error messages

Related Standards, Policies, and Processes

JSU CYBER AWARENESS

Location

1400 John R. Lynch Street
Student Center
Jackson, MS 39217-0280

Phone: 601.979.2241