CC PACKET 05102012 - Laserfiche WebLink

Home Browse Search

16 Policy and Procedures Remote Network Access —June 1, 2012 This policy applies to all employees, contractors, vendors and agents that connect to the City servers, applications or other network attached resources. This policy applies to remote access connections used to do work on behalf of the City, including but not limited to, file and print access, applications, and Intranet use. Remote access implementations that are covered by this Policy include, but are not limited to, dial -in modems, DSL,, VPN, SSII, and cable modems, etc. Policy It is the responsibility of City employees, authorized third party contractors, vendors and agents with remote network access privileges to the City network to ensure that their remote access connection is given the same consideration as the user's on-site connection to the City network. Remote access will be granted only with the approval of the requester's supervisor and/or the Information Technology Department Network Manager or in the case of a third party contractor, by contractual agreement. VPN is a "user managed" service. This means that the user is responsible for selecting an Internet Service Provider (ISP), coordinating installation, installing any required software, and paying associated connection fees. Additionally, •3 VPN access is provided through the Information Technology (IT) Department. No other department may implement VPN services. ❖ Only the VPN client software distributed by IT may be used. ❖ VPN account names and passwords will be assigned by an IT network administrator or authorized delegate. •S VPN access requires two -factor authentication using the established methods approved by the IT Department. ❖ The authorized user, or their department, is required to reimburse the ff Department for any licensing associated with the VPN client and/or authentication software. ❖ Only current Microsoft Windows platforms are supported. Additional operating systems and platforms may be supported on a case-by-case basis but it cannot be assumed that support will automatically be extended to non -Windows platforms. ❖ Only city -owned (domain managed) computers will be allowed to access the network over a VPN connection. Personally owned computers are prohibited from directly access network file shares and printers. B• All network activity during a VPN session is subject to city computer use policies and may be monitored for compliance. ❖ To mitigate perceived or discovered threats to the network, VPN access to the city network and systems may be disabled at any time without advanced notification to remote access users. Active sessions may also be disconnected without prior warning. ❖ All computers connected to the City network via VPN or any other technology must use the most up-to-date anti-virus software that meets or exceeds the corporate 12