Comments on: Network Extension Policy http://www.cutawaysecurity.com/blog/archives/225 Cutaway's Observations, Opinions, Rants, Raves, Tantrums, and Tirades Wed, 02 Jun 2010 22:30:56 +0000 http://wordpress.org/?v=2.9.2 hourly 1 By: Jeff http://www.cutawaysecurity.com/blog/archives/225/comment-page-1#comment-30887 Jeff Wed, 20 Feb 2008 20:37:08 +0000 http://www.cutawaysecurity.com/blog/archives/225#comment-30887 Hmmmm...Good point. At my Univ., networks extension are also not allowed. Why? Mainly due to the complexity of tracking down a host involved in copyright issues (DMCA) and inforcing NAC at a granular level (porting off a single student vs every student sitting behind a NAT device). Unless a VM with NAT is setup and users are allowed to RDEP/SSH into it as point of egress through the routable IP, I would say this is not a network extension in the spirit of our policy. Hmmmm…Good point.

At my Univ., networks extension are also not allowed. Why? Mainly due to the complexity of tracking down a host involved in copyright issues (DMCA) and inforcing NAC at a granular level (porting off a single student vs every student sitting behind a NAT device).

Unless a VM with NAT is setup and users are allowed to RDEP/SSH into it as point of egress through the routable IP, I would say this is not a network extension in the spirit of our policy.

]]>