VPN and Usage Policy

• Required VPN Usage:

  This policy to all Rego W2 based employees and contracts, referred to hereafter as “employees”.  Rego’s Corporate VPN should be used whenever a Rego employee is connected to networks outside of their home or workspace. This includes networks in public places, airports, while traveling, or any other location or network not set up under the Rego employee’s supervision. It is the responsibility of the Rego employee to ensure the VPN is running at all times in these situations.

  If the Rego employee prefers to use a third-party VPN provider, this is subject to approval by the IT Department. As of 08/01/2024 only the following VPN vendors are allowed:

  o    ExpressVPN

  o    NordVPN
  o    Speedify
  
  

• VPN Misuse:

  Avoid misuse or unacceptable uses of the corporate VPN that could result in administrative action. This list may not contain cover all scenarios, but examples of unacceptable use include:

  o    Port scanning or security scanning unless prior notification is given to and authorization is granted.

  o    Executing any form of network monitoring which will intercept data not intended for the user’s device.

  o    Circumventing user authentication or security of any device, network, or account. Escalating privileges or in any way circumventing the authorization restrictions imposed by a system.

  o    Escalating privileges or in any way circumventing access restrictions that you have been given by the Company by an authorized individual.

  o    Interfering with or denying service to any user other than the user’s device (for example, a Denial of Service attack).

  o    Using any program, script, or command, or sending messages of any kind, with the intent to interfere with or disable a user’s computing session using any connection means, whether locally or using the Internet, intranet, or extranet.

  o    Interfering with, attempting to bypass, or disabling network and device security systems.

  o    Traffic or downloads unrelated to Rego, such as streaming services, file downloads, or P2P file sharing.

Policy Download: