Slashdot Mirror
Remote Access Policies
Samalie writes "My company is considering implementing a formal remote access policy (and agreement for staff to sign) for users who access our network from home via VPN. Does anyone out there have any suggestions as to what this policy/agreement should contain? Anyone have their own corporate policy that I can borrow from? This is the first time I've come across anyone wanting a formal policy for this & online searches haven't been very helpful."
I second this. As an employee, I don't want to pollute my personal computer with work related stuff. It takes away valuable pr0n storage space.
most of the last few Ask Slashdot articles seem to be written by people who can't be bothered to do a little work.
That's why I got into computers.
Unless, of course, you work for a porn company. Then porn away.
Lawrence Person (lawrencepersonh@gmailh.com (remove all "h"s to mail)
http://www.lawrenceperson.com/
Ground rules.
The computer, as provided by (name of employer) are the sole property of (name of employer).
All use of this computer is subject to monitoring, logging and review by (name of employer)'s IT department.
No modifications of any kind may be made to (name of employer)'s computer by the employee.
VPN Rules..
#1 Only computers provided by (name of employer) (with appropriate user restrictions, group policies, security software, etc...) are allowed to connect via VPN.
#2 Only computers provided by (name of employer) may be connected to the network used for VPN access, at the time of VPN access.
ie - home/personal computers must be disconnected before connecting the work computer - unless the work computer is on a completely separated / isolated network from the home / personal computers.
#3 Any personal use of work computer will result in loss of VPN privelege on first offense, no exceptions.
Who is general failure, and why is he reading my hard drive?
1. If you connect to the VPN and place your own machine's IP onto our network... we will kill you.
Signing below indicates that you have read the policy in question and agree to adhere to it.
Don't make users sign it. That's ridiculous. But here's what it should be:
1. Same restrictions as what you have from work. No pr0n, nothing illegal.
2. User must have at least xp sp2 with patches installed with virus scanner X - or whatever your default company policy is. Or give them a pre-setup laptop. (Probably save you money in the long term, less chance of viruses etc)
3. Users must email their manager every 10 minutes to let them know that they're online.
The machines I login to cat the policy at the beginning of every session. I'll just send you my username and password and then you can read it for yourself.
My company uses a router and we're all in a NAT environment. We just use simple Hamachi + VNC to get directly into my PC at night. No one notice and we're happy with that.
This is some real Enterprise level shit right here.