Skip to main content

VPN Access Standard

Effective Date: October 27, 2025
Revised Date: October 27, 2025

1. Purpose

This document establishes a standardized guideline for remote access to Arkansas State University - Jonesboro (A-State) Virtual Private Network (VPN).

2. Scope

These guidelines apply to all employees, students and all authorized third parties (contractors or consultants) that will utilize VPN to access the A-State Network.

3. Definitions

  • VPN – A Virtual Private Network that establishes a secure connection between two trusted locations (your computer and the A-State network) via an insecure, public network (the Internet).
  • Geo Blocked – Restricting access to the network by the user’s geographic location.

4. Guidelines

VPN access allows users unrestricted access to the Arkansas State University computer network from locations external to the Jonesboro campus. This unrestricted access to the network could increase the University’s exposure to viruses, malware, and could allow hackers using compromised accounts greater access to the A-State network. These guidelines should be followed to lessen the security risk of the campus at large.

  • Standard VPN access will be approved by the Security Division if Chair/Dean/Dept. Head approval is not available. If Chair/Dean/Dept. Head approval is available, then VPN access will be granted without further approval from ITS.
  • VPN access is geo-blocked to the United States and Canada.

  • International VPN access is permitted on a per-user and per-country basis. This requires a separate set of approvals as well as standard VPN access. This access must be approved by the Security Division and the Networking Division.
  • Devices failing security scans may be denied VPN access.

  • Access may be suspended/terminated by ITS at any time if access could cause a security issue.

  • VPN access is logged, and the logs will be retained for one year.
  • Logging includes:
    • Connection/disconnection times
    • IP address received from DHCP
    • Connecting IP address
    • IP address(es) accessed
    • Username that opened the connection
  • ITS may require devices connecting via VPN to be scanned for up-to-date OS and software patches and/or versions, current antivirus software, or other security related issues.

  • 3rd party vendors may apply for VPN access but require a sponsored A-State user account.

5. Standards Review

This document will be reviewed and reaffirmed annually, or upon significant changes to university IT governance, systems, or regulatory requirements.

Effective Date: October 27, 2025
Next Review Date: October 27, 2026
Version: 1.1

Back to top