 |
 |
Other than giving you one less option, it shouldn't really matter. Everything goes through EZProxy. Resources accessed through the VPN can be covered by authenticating the VPN IP range. Anything not coming through the VPN are authenticated by the means you normally use. Many, if not most, schools work this way, so you have plenty of company. As always, the canonical resource is the EZProxy mailing list. Thanks, Cary On Thu, Oct 18, 2012 at 11:32 AM, Joselito Dela Cruz <[log in to unmask]> wrote: > Hi Heather, > Yes our VPN uses split tunnel. > > -----Original Message----- > From: Code for Libraries [mailto:[log in to unmask]] On Behalf Of > Klish, Heather J > Sent: Thursday, October 18, 2012 2:20 PM > To: [log in to unmask] > Subject: Re: [CODE4LIB] VPN & EZ Proxy > > This also depends on if your VPN is full tunnel or split tunnel. Here's > my very, very simplified explanation: > > If full tunnel, users who are logged into the VPN shouldn't need to > authenticate as traffic to the external resource should be seen as > coming from 'on-campus'. > > If split tunnel, users who are logged into the VPN will need to > authenticate because traffic directed to external sites will be using > the IP address of the user (I believe). > > We had problems with this while our VPN was split tunnel. We had to set > EZproxy to always authenticate users coming in from our VPNs IP address. > > Heather > > ---------- > Heather Klish > Systems Librarian > University Library Technology Services > Tufts University > 617.627.5853 > [log in to unmask] > ________________________________________ > From: Code for Libraries [[log in to unmask]] on behalf of > Joselito Dela Cruz [[log in to unmask]] > Sent: Thursday, October 18, 2012 1:46 PM > To: [log in to unmask] > Subject: [CODE4LIB] VPN & EZ Proxy > > Hi All, > > We use EZ Proxy for authentication and we always tell the staff who uses > VPN to turn their VPN off so they can access our databases. > Is this the right way? Looking for answers around and could not find > any. I thought I would throw this in here. > Thanks for feedbacks. > > Jay Dela Cruz -- Cary Gordon The Cherry Hill Company http://chillco.com