frequently asked questions about K-State's VPN
It is a set of technologies that allow you to build secure "virtual" paths between hosts on insecure networks. The particular type of VPN Information Technology Services is deploying is commonly known as a remote access or tunnel VPN service. The K-State VPN service allows you to establish an encrypted tunnel between your computer and K-State's network via the Internet. The primary purpose of the encrypted tunnel is to secure (encrypt) your data so that it can be sent across public (insecure) networks without fear of the data being viewed and/or tampered with by unauthorized people.
By connecting to K-State's VPN, you assure that the data you transmit or receive will be secure between your computer and K-State. Traffic between the VPN and the computer you are communicating with will not be encrypted, unless you are using SSL-enabled applications. Furthermore, it allows you to gain access to resources that are restricted based on source address 129.130.x.x. It also allows access to services such as Samba that are otherwise restricted by the border routers.
When using a split tunnel your traffic to campus will be encrypted and secured between your computer and the VPN. When using a full tunnel all of your network traffic will be routed through an encrypted connection to the VPN and then from the VPN to its intended destination. With both options traffic between the VPN and the computer you are communicating with will not be encrypted, unless you are using SSL-enabled applications.
Yes.
Yes. The password is encrypted using SSL.
No. A VPN provides security by encrypting and decrypting data that passes through a VPN connection. It does not offer protection from viruses or other malware. Windows and Mac computers are required to run working antivirus software and up-to-date virus definition files.
Yes. SSH provides end-to-end encryption, whereas the VPN only provides encryption from your client up to the VPN itself, which is located in the K-State core network. If you are using non-SSL-enabled applications, or websites, data between the VPN and the computer you are communicating with will not be encrypted.
When prompted to enter a username and password, you will need to enter your eID and password.