Enforcing the VPN policy for the company president
Assume you are a network administrator. You keep the internal network secure through a defense-in-depth strategy. Your company has many remote users, all of whom must adhere to a comprehensive VPN policy The policy states that only company-owned devices may connect to the internal network over a VPN connection. However, the company president, who is a former tech consultant, set up VPN access from her personal laptop for convenience.
Answer the following question(s):
How do you enforce the VPN policy for the company president? Provide rationale for your answer.
Sample Answer
here are some ways to enforce the VPN policy for the company president:
- Talk to the company president. Explain the importance of the VPN policy and why it is necessary to enforce it. The company president may not be aware of the risks associated with using a personal laptop to connect to the internal network.
- Send the company president a reminder of the VPN policy. This could be done in the form of an email or a memo. The reminder should reiterate the importance of the policy and the risks associated with violating it.
- Block the company president’s personal laptop from connecting to the VPN. This could be done by configuring the VPN server to deny connections from the company president’s laptop’s IP address.
- Require the company president to use a company-owned laptop to connect to the VPN. This could be done by providing the company president with a company-owned laptop or by requiring the company president to purchase a company-owned laptop.