The purpose of this policy is to provide guidelines for Remote Access Virtual Private Network (VPN) connections to the IST Austria network, external access to internal resources/services.
internal service … Every IT service, which is not available directly from the internet, because of security/technical reasons.
external access … Typically access to IST Austria resources via the internet. Every network not provided by IST Austria IT is considered external, also some low security networks on campus (e.g. public-wlan, eduroam, guesthouses, apartments,…)
This policy applies to all users of the IST Austria IT infrastructure utilizing a VPN to access the IST Austria networks. This policy applies to implementations of VPN that allow direct access to IST Austria networks.
Approved users of the IST Austria IT infrastructure may utilize the benefits of a VPN.
Every Laptop maintained and installed by IST Austria IT will have necessary software to use VPN preinstalled.
For other devices (e.g. private laptop or workstation, mobile phone) the user is responsible for installing the required software.
The VPN is an IP only resource. Other protocols are not supported.
It is the responsibility of the user with VPN privilege to ensure that unauthorized users are not allowed access to IST Austria networks.
VPN access is controlled using username and password authentication. Usually, the username is the IST Austria account.
All traffic destined for IST Austria networks is logged and associated with the user.
Only traffic destined for IST Austria networks will travel across the VPN tunnel, all other traffic will go through the user’s ISP.
IST Austria IT is providing the VPN service and the service will be supported during business hours, 8:00 a.m. – 5:00 p.m. After hours support will be handled by on-call personnel, but a response is not guaranteed until the next business day.
If a problem is encountered please report it to IT Support by e-mail to firstname.lastname@example.org or by phone (+43 2243 9000 1300) with the following information available for the support personnel:
- IST Austria username
- Date and time of problem
- Any error messages
This policy regulates the use of all VPN services to IST Austria networks and users must comply with the Acceptable Use Policy.
To maintain security, VPN services will be terminated immediately if any suspicious activity is found. Service may also be disabled until the issue has been identified and resolved.
By choosing to use the IST Austria VPN, you hereby agree to all terms and conditions listed above.
Effective Date: 2018-02-01
Next Review: 2021-02-15
Last Reviewed: 2020-02-15
|DRAFT||2018-01-18||Initial Draft||Stephan Stadlbauer|
|1.0||2018-01-24||First release||Stephan Stadlbauer|
|Maksim Lobashov||Teamlead CoreIT||2018-01-18||OK|
|Roland Gansch||Division Head of SSUs||2020-02-15||review pending|
|Stephan Stadlbauer||Head of IT||2018-01-24||OK|