Before you depart
Device Readiness
- If you access sensitive data from your campus issued laptop, we recommend you request a loaner device when traveling.
Please contact the IT HelpDesk to request a loaner device
- Ensure antivirus, security patches, and firewall are enabled and up to date
- Backup your data. Level 2 and 3 data can be stored in Dropbox.
Please contact IT Helpdesk if you need to backup Level 1 data.
- Remove all sensitive data and any information that is not needed
Authentication & Campus Access
Install the DUO app on mobile devices.
Note there may be restrictions depending the destination. Check the DUO support site for current information.
- Users with an IP address from OFAC regulated countries and regions will be unable to access Zoom services. To comply with economic and trade sanctions enforced by the U.S. Office of Foreign Assets Control, DUO and Zoom have announced that they are no longer offering their services to users whose IP addresses belong to an OFAC restricted country or region. For more information on Zoom restrictions, visit theZoom support website.
- If you are not using the mobile app, contact the IT HelpDesk and request a token
- Test your DUO authentication with the devices you will be taking with you
-
Install and configure GlobalProtect, the campus VPN software. If you do not currently have that you can request GlobalProtect. To protect against eavesdroppers on networks during your trip, install and configure GlobalProtect to utilize full tunneling.
The url for full tunneling is
gpft.fullerton.edu
Software Availablity and Restrictions
Check for Import restrictions on encryption software
- Many foreign countries do not permit encryption software to be imported or used without prior approval.
- For example, China requires international travelers to apply for a license to use encryption software before arrival. To learn more about background information and details of import restrictions on encryption software, follow the links below to external websites:
- Wikipedia article discussing restrictions on encryption software import
-
Crypto Law Survey website with a list of countries and their respective encryption software import restrictions.
- If you are not able to use encryption software at your destination, it is strongly recommended to leave your data and device at home, and bringing a loaner device instead. If your information is sensitive and it is illegal to secure your devices/data and communication, contact the Information Security office (iso@fullerton.edu) for advice.
Be aware Canvas is inaccessible from countries & regions embargoed by United States regulations.
While you're traveling
Going Online
- Use VPN to access CSUF resources
- Do not plug in untrusted accessories (flash drives, charging cables, memory cards)
- Do not join networks automatically; turn off wireless, Bluetooth, and GPS when not being used
- Assume Wi-Fi is insecure, utilize VPN and Eduroam when possible. Check for Eduroam availability.
Web Browsing
Practice safe web browsing. This threat of malware infection is magnified during foreign travel as you connect to public networks in hotels, airports, cafes, etc at your destination. To protect yourself while browsing websites abroad:
- Connect to HTTPS websites. Before sending or receiving any sensitive information, make sure the internet address(URL) in the web browser starts with HTTPS.
- If your browser displays an error about the digital certificate used to encrypt the data, i.e. that it cannot verify the identity of the HTTPS website, you should assume the site is fake, compromised or the web traffic is being intercepted.
- Stop connecting to the website and try it from another location.
- Do not click on suspicious links or prompts.
- Malicious websites commonly craft attacks to exploit a user’s curiosity, impatience or to scare them with malware threats.
- These malicious attacks might come in the form of links or pop-ups that present free offers too good to be true or imminent malware infection if you don’t install the product. Think before you click a link or “Yes” to a prompt.
- Clear all browser cache after use on devices that do not belong to you.
- Web applications can leave cookies or other information even after log out. Clear the history, cookies, cache, and other information from the browser after finishing.
- Do not assume incognito browsing is erasing browser data.
When you return
- Avoid immediately connecting to personal or business networks.
- If you traveled with your Campus issued laptop, contact the IT Helpdesk for assistance in scanning for vulnerabilities.
- If you had a loaner device, return it to IT Helpdesk. The loaner device will be wiped and reinstalled.
- Change the passwords for all accounts used during your travel.