Audience: Fullerton College students and staff

Overview: Personal VPNs (e.g., NordVPN, ExpressVPN) encrypt internet traffic for privacy but can trigger security alerts when accessing Fullerton College or NOCCCD resources (e.g., FCNet, MyGateway). This article explains why personal VPNs are discouraged and how to avoid account lockouts.

Prerequisites

• An FCNet account (e.g., [email protected], [email protected]) or MyGateway access.
• Awareness of NOCCCD resources (e.g., Office 365, Banner, SARS).
• If using a personal VPN, access to its settings (e.g., server location).

Instructions

1. Understand the Risks:
   • Personal VPNs hide your IP address, which NOCCCD security systems may flag as suspicious, similar to tactics used by threat actors.
   • Accessing FCNet, MyGateway, or other NOCCCD systems via a personal VPN may trigger automated account lockouts or manual investigations.
   • Investigations can disrupt access for hours or days.
2. Avoid Personal VPNs for NOCCCD Resources:
   • Disable your personal VPN (e.g., NordVPN, ExpressVPN) when accessing:
     • FCNet email or Office 365 (o365.fullcoll.edu).
     • MyGateway (mg.nocccd.edu).
     • Banner, SARS, or other on-campus systems (use FortiClient VPN instead, see [How to Set Up and Use the Staff VPN](artifact_id: 8b9a2c1d-6f3e-4b7a-9c2b-5e8f7d3a2e1c)).
   • Most NOCCCD services (e.g., Office 365, MyGateway) use HTTPS encryption, making personal VPNs unnecessary.
3. If You Must Use a Personal VPN:
   • Select a consistent server location, preferably in California (e.g., Los Angeles server for NordVPN: https://nordvpn.com/servers/usa/losangeles/).
   • Avoid servers outside California or the U.S., as they increase the likelihood of security alerts.
   • Notify [email protected] in advance with your VPN provider and server location to reduce lockout risks.
4. Recover from a Lockout:
   • If your account is locked due to VPN use:
     • Contact [email protected] or call (714) 992-7111.
     • Provide your FCNet email or MyGateway username and details of the VPN used.
     • Verify your identity in-person (Building 500, Room 517) or via Zoom with a photo ID (e.g., student/staff ID, driver’s license).
   • ACT will investigate and unlock your account, which may take 1–3 business days.

Notes

• FortiClient VPN: Use Fullerton College’s FortiClient VPN for on-campus resources, not personal VPNs.
• Security Alerts: NOCCCD’s automated systems flag non-FortiClient VPNs due to frequent use by malicious actors.
• Policy Compliance: Using personal VPNs may violate NOCCCD’s Acceptable Use Policy if it disrupts services.
• Out-of-Country Access: For Office 365 abroad, submit a vacation request: Staff (please use the ticket/service request system). Students email the [email protected] to schedule a zoom appointment for ID verification. Do not use a personal VPN for out-of-country access.

FAQs

Why does my personal VPN cause account lockouts?
NOCCCD security systems flag non-FortiClient VPNs as potential threats, triggering automated or manual lockouts.

Can I use a personal VPN for non-NOCCCD services?
Yes, but disable it when accessing FCNet, MyGateway, or other NOCCCD resources to avoid issues.

What if I’m abroad and need Office 365 access?
Staff (please use the ticket/service request system before your trip). Students email the [email protected] to schedule a zoom appointment for ID verification.

How long does a lockout investigation take?
Typically 1–3 business days, depending on the complexity and verification process.

Support

• Email: [email protected]
• Phone: (714) 992-7111
• In-Person: Building 500, Room 517, during business hours
• For complex issues, ACT will escalate to NOCCCD IS HelpDesk.