Security posture check for University-owned self-managed devices

Overview

This article outlines the process and requirements involved in satisfying the security posture check for University-owned self-managed devices.

Scope

• University-owned self-managed devices
  • Microsoft Windows
• Privileged access VPN profiles
  • ZoneVPN_Admin
  • ZoneVPN_Admin-offcampus
  • ZoneVPN_EPM
  • ZoneVPN_EPM_Admin
  • ZoneVPN_BI
  • ZoneVPN_Clients
  • ZoneVPN_Degreeworks
  • ZoneVPN_ERP
  • ZoneVPN_HRPY
  • ZoneVPN_IDAP
  • ZoneVPN_SAPBPR
  • ZoneVPN_Vendors

System Requirements

Systems must satisfy the criteria listed below in order to connect to the target VPN.  This list is subject to change without notice.

• Cisco Secure Client agent is current and running

https://service.purdue.edu/TDClient/32/Purdue/KB/ArticleDet?ID=2173

• Microsoft Defender for Endpoint is current and running

https://service.purdue.edu/TDClient/32/Purdue/KB/ArticleDet?ID=2172

• Rapid7 agent is current and running

https://service.purdue.edu/TDClient/32/Purdue/KB/ArticleDet?ID=2171

• Disk encryption is on

https://support.microsoft.com/en-us/windows/bitlocker-drive-encryption-76b92ac9-1040-48d6-9f5f-d14b3c5fa178

• Host firewall is on and blocking incoming connections

https://support.microsoft.com/en-us/windows/firewall-and-network-protection-in-the-windows-security-app-ec0844f7-aebd-0583-67fe-601ecf5d774f

Still need help?  Click the 'Purdue IT Request' button to start a ticket.