Laserfiche WebLink
Advanced Authentication (example: Multi-Factor Authentication) is required when available for <br />access to Metro-INET network resources. <br /> <br />3. Network Access <br /> <br />Equipment not owned by a Metro-INET agency used in an agency building should only use the <br />guest connection to the Internet unless approved by Metro-INET. Metro-INET will review the <br />Metro-INET network and connected devices for vulnerabilities and implement appropriate <br />mitigation or remediation measures. <br /> <br />Metro-INET will not remotely access an active session without the logged-in account owner’s <br />permission to ensure integrity of access logs. <br /> <br />Reasonable availability is expected of both Metro-INET and those requesting support. <br /> <br />4. Remote Access <br /> <br />Examples of remote access include and are not limited to: Microsoft 365 / cloud services, virtual <br />private network (VPN), Windows Remote Desktop, and Windows Terminal Server connections. <br /> <br />All aspects of the Metro-INET Acceptable Use Policy apply while connected to Metro-INET <br />resources remotely. <br /> <br />Remote access to the Metro-INET network requires a request from a supervisor and approval <br />from the Metro-INET agency designee. <br /> <br />All remote access connections to Metro-INET networks shall be made through approved remote <br />access methods employing encryption and advanced authentication. <br />Remote access from a device not supported by Metro-INET requires a current Operating System, <br />applications, and anti-virus software. It is the owner’s responsibility to ensure all critical and <br />security updates are installed prior to connecting. For additional information review the Metro- <br />INET Computer Security Checklist. <br /> <br />Remote access privileges may be revoked at any time by an employee’s supervisor or Metro- <br />INET Information Security Manager. <br /> <br />Recreational use of remote connections to the Metro-INET network is strictly forbidden. <br /> <br />Private or confidential data should not be transmitted over an unsecured (public) wireless <br />connection. <br /> <br />5. Clear Screen <br /> <br />Applications or network services shall be logged out or disconnected when they are no longer <br />needed. Workstations and laptops shall be logged out or locked when unattended. <br /> <br />Metro-INET may configure Metro-INET supported devices to automatically lock after a set <br />duration of inactivity. <br /> <br />Page 53 of 60 <br /> <br />