Virtual Private Network (VPN) is a term used to generically describe the use of encryption to provide a secure connection through an otherwise insecure network. The VPN implementation at GW is through a Cisco-developed application with a client application loaded directly onto a desktop computer. Once one runs the application and logs into the VPN network, the following will occur:
- Data is encrypted by the locally installed VPN client before it is sent outside of the computer.
- The encrypted data is sent to a piece of GW hardware where it is decrypted and relayed along to the destination address using a GW internal IP address. This address will vary based upon the VPN group with which the user has authenticated.
- A response is sent from the destination machine to the GW hardware.
- The data is encrypted and sent to the local computer.
- The data is decrypted by the installed VPN client.
- The data is used by the local application.
- The VPN enhances local desktop security.
- The VPN provides for access to University systems from remote locations.
- Network traffic through the VPN is routed through restricted and specific physical pathways, providing:
- integration into the University's intrusion detection and prevention systems
- virus scanning
- traffic analysis
In general, individuals requiring access to GW applications where those applications are not protected through a middleware component will need to use the VPN client. Additionally, applications that provide access to systems identified by the University as especially sensitve will require the use of a VPN client.
How do I get a VPN Client?
New users: The VPN client will be given to individuals who need it as part of the package to be picked up with the other account credentials (username/password) following account activation.
Current users: For those who are currently using Banner or EAS, VPN software will be provided upon request and following the execution of the VPN access agreement. Please send these materials to the Banner Security Office, and you will be contacted when your software is ready. For questions, please contact Banner Security.
VPN Support
- For assistance on what VPN client you need, please contact the Banner Security Office.
- In a managed environment, please contact the ISS Help Desk to submit a ticket to schedule an installation.
- In a non-managed environment where you need assistance installing the VPN, please contact the ISS Help Desk for support.
- For general application support, please contact the ISS Help Desk.
Other Information
- The VPN is run as a simple background task on your computer and should not cause any of your other local application to slow down.
- While connected to the VPN client, you will be assigned a new GW IP address. If you were logged into other systems before you connect, you may have to log into them again.
- Network printing from your desktop (not through Banner or other enterprise applications) may not function while you are connected to the VPN. Printing to locally attached printers will not be affected.
- As new systems are brought online, VPN rules will be modified according to usage requirements. These modifications will not require additional effort on the part of the end user.
Banner Security Office
44983 Knoll Square Drive, Suite 225
Ashburn, VA 20147
(202) 994-0567