If you are working off campus and are accessing U-M data classified as Restricted, High, or Moderate, you must use a secure internet connection, including the appropriate VPN for your campus. Always use secure networks to protect your personal data as well.
- If your unit gives you permission to use a personal device to access or maintain sensitive university data, be aware of and comply with Security of Personally Owned Devices That Access or Maintain Sensitive Institutional Data (SPG 601.33).
- If you are traveling, see the Guidelines for Domestic and International Travelers for tips related to travel.
Connect Securely Off Campus
Use a Virtual Private Network (VPN)
Install and use the appropriate Virtual Private Network (VPN) client for your campus. This provides you with a secure computing experience when using an off-campus connection. When you use a U-M VPN, you are using a University of Michigan network from wherever you are; this allows you to access U-M resources that require you to be connecting from a U-M network.
- U-M VPN. Available to all U-M students, faculty, staff, and sponsored affiliates, as well as alumni and retirees.
- MiWorkspace Windows Users: Direct Access is installed on your computer, and it automatically protects many of your connections to U-M resources for remote work without you needing to do anything. You may still need to use the U-M VPN to connect to some resources, and you should use a VPN to secure work connections from your personal computer.
- MiWorkspace Mac Users: Your MiWorkspace Mac is configured to use the U-M VPN, but you need to turn it on.
- Michigan Medicine does not support VPN from personal devices. If you need access to Michigan Medicine resources, use your HITS CoreImage or CoreMac computer or use the Windows Virtual Desktop service on your laptop or computer.
- UM-Dearborn VPN. For students, faculty, staff, and sponsored guests on the Dearborn campus, UM-Dearborn ITS provides VPN and other networking services.
- UM-Flint VPN. For use by students, faculty, and staff on the Flint campus.
Secure Your Home Wireless Network
Take steps to Secure Your Home Wireless Network, and make sure to secure any new devices you add to it. Remember that all internet-enabled devices should be kept up to date to protect your network.
Use a Cellular Network
Your cellular carrier network is a good choice for a secure connection. Remember to Secure Your Mobile Device, and see the Guidelines for Domestic and International Travelers if you are traveling.
Protect Yourself on Public WiFi
Public WiFi should be avoided if possible, but if you find yourself in a situation where you must use it, protect yourself and U-M with the Security Tips for Using Public WiFi.
Connect Securely On Campus
Use a Wired Connection
Wired connections to the internet from on-campus computers, including Campus Computing Site computers, benefit from the university's secured networks. These are your best option for a secure connection whenever possible.
MWireless is a secure WiFi network and should be used for wireless connections by all of the U-M community whenever possible. Before using the service, you will need to configure settings on your WiFi device. See Connecting to MWireless.
Use Wired and Wireless at Michigan Medicine Locations
Michigan Medicine provides a number of options for WiFi & Networks.
Guidance on use of unauthorized VPNs or similar extensions of U-M networks
As defined in Network Security Standard (DS-14 ), unauthorized use of network extensions to bypass blocked insecure remote access protocols (IRAP) is a risk to the security of U-M’s digital assets and runs counter to the standard. Extensions to the network include, but are not limited to:
- Routers, switches, and hubs.
- Wireless access points.
- Firewall appliances.
- VPN servers or VPN-like devices and programs (e.g. Wireguard, TeamViewer, or similar).
Extensions to the U-M network must be documented by the requesting unit, then reviewed and approved by appropriate campus network administrators, ITS Networking, and ITS Information Assurance. When unapproved network extensions are identified, they will be blocked without notice.
If you believe you have a need to create an extension of the U-M network, contact ITS Networking through the ITS Service Center.