Remote Access Policy

Purpose

The purpose of this policy is to define standards for connecting to Nanyang Polytechnic's network from remote host. These standards are designed to minimize the potential exposure to Nanyang Polytechnic from damages which may result from unauthorized use of Nanyang Polytechnic resources. Damages include the loss of sensitive or company confidential data, intellectual property, damage to public image, damage to critical Nanyang Polytechnic internal systems, etc.

Scope

This policy applies to all Nanyang Polytechnic staff with a Nanyang Polytechnic-owned or personally-owned computer or laptop or hand-held device used to connect to the Nanyang Polytechnic network.This policy applies to remote access connections used to do work on behalf of Nanyang Polytechnic, including reading or sending email and viewing intranet web resources.

Remote access implementations that are covered by this policy include, but are not limited to, dial-in modems, ADSL and cable modems, etc. 

Policy

General

It is the responsibility of Nanyang Polytechnic staff with remote access privileges to Nanyang Polytechnic's corporate network to ensure that their remote access connection is given the same consideration as the user's on-site connection to Nanyang Polytechnic.

Nanyang Polytechnic staff bears responsibility for the consequences should the remote access be misused.

Please review the following policies for details of protecting information when accessing the corporate network via remote access methods, and acceptable use of Nanyang Polytechnic's network: 

a. Virtual Private Network Policy

b. NYP's Internet Acceptable Usage Policy

c. Wireless Network Policy 

Requirements

At no time should any Nanyang Polytechnic staff provide their remote access login or password credentials to anyone, not even family members.

Staff with remote access privileges must ensure that their corporate-owned or personal computer or laptop or hand-held devices, which is remotely connected to Nanyang Polytechnic's corporate network, is not connected to any other network at the same time, with the exception of personal networks that are under the complete control of the user.

Staff with remote access privileges to Nanyang Polytechnic's corporate network must not use non-Nanyang Polytechnic email accounts (i.e., Hotmail, Yahoo, AOL, Google), or other external resources to conduct Nanyang Polytechnic business, thereby ensuring that official business is never confused with personal business.

All hosts that are connected to Nanyang Polytechnic internal networks via remote access technologies must use the most up-to-date anti-virus software.

Organisations or individuals who wish to implement non-standard Remote Access solutions to Nanyang Polytechnic production network must obtain prior approval from Computer and Network Centre.

Enforcement

Any staff found to have violated this policy may be subject to disciplinary action, up to and including termination of employment.

Definitions

Term Definition
Cable Modem Cable companies such as AT&T Broadband provide Internet access over Cable TV coaxial cable. A cable modem accepts this coaxial cable and can receive data from the Internet at over 1.5 Mbps. Cable is currently available only in certain communities.

Dial-in Modem A peripheral device that connects computers to each other for sending communications via the telephone lines. The modem modulates the digital data of computers into analog signals to send over the telephone lines, then demodulates back into digital signals to be read by the computer on the other end; thus the name "modem" for modulator/demodulator.

Dual Homing Having concurrent connectivity to more than one network from a computer or network device. Examples include: Being logged into the Corporate network via a local Ethernet connection, and dialing into AOL or other Internet service provider (ISP). Being on a Nanyang Polytechnic-provided Remote Access home network, and connecting to another network, such as a spouse's remote access.

ADSL Asymmetric Digital Subscriber Line (DSL) is a form of high-speed Internet access competing with cable modems. DSL works over standard phone lines and supports data speeds of over 2 Mbps downstream (to the user) and slower speeds upstream (to the Internet).

Remote Access Any access to Nanyang Polytechnic's corporate network through a non-Nanyang Polytechnic controlled network, device, or medium.

Split-tunneling Simultaneous direct access to a non-Nanyang Polytechnic network (such as the Internet, or a home network) from a remote device (PC, PDA, WAP phone, etc.) while connected into Nanyang Polytechnic's corporate network via a VPN tunnel. VPN Virtual Private Network (VPN) is a method for accessing a remote network via "tunneling" through the Internet.

Revision History

2 May 2006 Version 1.0