The Stanford LAN Extension (SLE) was implemented to enable access to Stanford resources from the Palo Alto Veterans Affairs Medical Center (PAVAMC). This means that you can have your computer, while physically located at the VA hospital, placed onto the School of Medicine network in order to access Stanford resources.
Users will have to follow VA rules as well as School of Medicine security rules—which means that any computer brought onto the VA campus MUST be registered, certified, and encrypted, whether it contains any sensitive information or not. (These rules apply to personal computers as well, should they be brought onto VA property.)
Read the instructions below on setting up your computer on the SLE, and on following proper security practices once connected. NOTE: No VA-funded equipment is allowed on the SLE.
Desktop Configuration Management Tool (DCM), automating your
computer's correct network and security settings. The DCM will be
installed by the Stanford IT support person, Ed Lee.
You will need to encrypt your computer with Stanford Whole Disk Encryption (SWDE), which encrypts your entire drive with either FileVault 2 (Mac OS) or BitLocker (Windows). To find out how to encrypt your system, visit the UIT Encryption Page or consult local IT support. If you use USB drives or other external storage, those must be encrypted as well.
Stanford Asset Tags
Once the necessary registration has been completed, a sticker will be placed on the laptop to identify it as a Stanford computer (VA sticker, according to VA policy). This is distinct from the Stanford Property Inventory sticker; the red SLE sticker confirms that your computer (or phone, or mobile device) is properly registered, certified, and encrypted.
Approved Storage Devices
USB and external storage devices must be on the VA list of approved devices before they can be used on the VA campus. Please check with the TDS Service Desk at 650-725-8000 or submit a request at tdshelp.stanford.edu for more information
Remove Peer-to-Peer Applications
No Skype or other peer-to-peer applications (BitTorrent, eMule, LimeWire, etc) are allowed on the Stanford LAN extension.
Only certain areas of the VA were wired for the Stanford LAN Extension as the network was being built. Any new connections will likely require additional funding, as there will have to be new cable run and other new networking equipment installed. Therefore, if your location is not currently part of the SLE, and you need a connection, you should direct your request to the following people:
Contact IRT Security: file a help ticket, or call us at 725-8000 (option 4), and we will assess your situation and help you with the next steps.
Once you are on the network, you are personally responsible for maintaining the security of your own computer and the information stored on it. To make sure that you're handling your information the right way, read on for proper file storage and transfer practices, and general security habits.
Secure File Storage
As part of the Data Security Program, the School of Medicine has a centralized backup server. Stanford folks will need to use the CrashPlan server to back up any computers used to access University files. The CrashPlan service is free, and it backs up your information daily and automatically. For more, see the Backup FAQ.
Stanford Secure Email(secureemail.stanford.edu) is integrated into the Stanford Webmail system, allowing you to send encrypted emails when you need to discuss High Risk information.
Secure File Transfer
MedSecureSend (mss.stanford.edu) helps you securely send files up to 100GB in size, to colleagues on or off-campus.
Establishing Proper Security Habits
Do not share SUNetIDs and passwords—not even with tech support.
Since every computer on VA property must be registered, certified, and encrypted, the same rule applies to any computer belonging to a visiting colleague or presenter. A computer without a red sticker will be confiscated and returned only after the encryption process is complete—which may take up to two days—so if you are on the VA campus and expecting visitors, consider the following:
Have collaborators or presenters send you all necessary files ahead of time, so that they do not need to bring a computer on campus; conference rooms have approved computers available for your use.
The VA Hospital parking lot is constantly patrolled and is highly secure; visitors are encouraged to lock a computer in the trunk of their car rather than bring it on campus to have it confiscated.
If one of your colleagues is expecting to visit campus multiple times, you can contact Ed Lee and have their computer registered as well.