VPN Exceptions

In the future, exceptions will only be granted for a maximum of 1 year, after which - if the exception is still needed - an extension must be applied for, but the IT officers will be informed before the deadline expires.
The application must include a justification as to why the service must be accessible from the entire Internet or to which addresses access can be restricted.

Key services:

• SSH
  Exceptions for SSH exist only for automated communication between devices, not for personal log in.
• VPN
  Exceptions for a VPN of an institute are only available if this VPN solution is also secured by a 2^nd (time based) factor.
• Email
  Whether there are exceptions for mail servers (without 2^nd factor) and in which countries these exceptions apply is determined by the rectorate depending on the risk situation.
• Web servers
  Web servers, which should be reachable by external persons, of course get an exception from VPN, but web applications with login need a 2^nd factor (e. g. by connecting to our SSO system), exceptions from this are only if there are very many external users, who cannot register an account on connect.tugraz.at.