İSTANBUL KÜLTÜR UNIVERSITY POLICY FOR VPN USE

DEFINITIONS  

1. İKÜ BST:   İstanbul Kültür University Information Systems and Technology Department
2. İKÜ-VPN:  Name of the VPN service provided by the İKÜ Information Systems and Technology Department
3. USER: The person who activates the İKÜ-VPN service for their own İKÜ user name and password

TERMS OF SERVICE

1. The remote connection resources and services allocated to members of İstanbul Kültür University and authorized employees should be used within the framework of the "İKÜ Internet Usage Policy," the full text of which can be found at https://www.iku.edu.tr/8/1355/internet-kullanim-politikasi.html. 
2. The remote connection-VPN connection service is personal, and it cannot be transferred to another user. Users who receive this service are responsible for the device they are connecting with and any unauthorized activity on this device. 
3. The university's computer network investments are made to serve primary academic, administrative, educational, and research purposes. Personal use via a remote connection/VPN service should never interfere with other users' primary network access requirements (academic, administrative, training, and research).
4. İKÜ IST cannot be held responsible for any weaknesses and vulnerabilities that may arise in the protocol and service standards used in the İKÜ-VPN infrastructure. İKÜ IST is obliged to meet such deficits as soon as possible. 
5. The user may experience unexpected interruptions in access to the İKÜ-VPN service due to scheduled maintenance or system malfunctions.
6. İKÜ/IST does not provide any speed guarantee when the İKÜ-VPN service is being used.
7. İKÜ/IST reserves the right to restrict and limit the speed of access to İKÜ-VPN while it does not restrict access speed.
8. The general rules and prohibitions that should be complied with when using remote connection/VPN resources are as follows:
   • Peer-to-peer (P2P) file sharing programs (μTorrent, BitTorrent, BearShare, etc.) are prohibited. The remote connection/VPN user must close these applications before connecting to the system. The user should not allow the automatic opening of such applications.
   • The use of the remote connection/VPN service for personal gain and profit is prohibited.
   • Mass mailing, mail bombing, spam, and allowing third parties to send these by using through the remote connection/VPN service is prohibited. The remote connection/VPN user should run a virus scan before connecting to the system.
   • Unlicensed software, movies, and music files cannot be distributed via the İKÜ-VPN in any way. All legal liability belongs to the user in this matter. 
   • Activities that threaten network security (DoS attack, port-network scan, etc.) are prohibited.
   • Every user who uses the remote connection/VPN service is primarily responsible for the use and security of resources allocated to him/her by the university and for the prohibited activities that may occur if these resources are used consciously or unconsciously by a third party.
   • No services (Proxy, DHCP, BOOTP, DNS, etc.) can be provided and no routing protocol announcements can be made via the remote connection/VPN resources.
   • Users must use an operating system with ongoing security and technical support (For example, security and technical support for Windows XP devices is terminated by Microsoft) on the devices they use while using this service, and complete the updates and patches of their operating systems, anti-virus programs and security programs. İKÜ IST can check the security of the device before allowing a user's remote connection/VPN connection. Failure to comply with the above conditions may result in an interruption of the user's access, without the user's permission, and until the requested security conditions are complied with.
9. In case of failure to comply with the above rules, the user may be subject to one or more of the following penalties:
   • Termination of remote connection/VPN service access,
   • Switching off or changing password of the central user code on server systems,
   • Mobilization of investigative mechanisms within the university,
   • Mobilization of judicial mechanisms.
10. The user who fails to comply with the rules is notified online. The user who does not receive the notification can obtain information from İKÜ IST via kultur@iku.edu.tr.
11. These rules apply as of the date of publication. These rules will be reviewed periodically and revised as necessary. İKÜ IST may announce any updates or changes related to these services on the İKÜ IST web page and by sending an email to the İKÜ mail addresses of users. It will be assumed that the announcements have reached the user. 

İstanbul Kültür University

Department of Information Systems and Technology

The internet service offered by our university - including service providers outside UlakNet – is based on the "ULAKBIM Use Policy Agreement."

Anyone who benefits from the internet service of our university is deemed to have accepted the "ULAKBİM Use Policy Agreement" listed below. The internet access of users who violate these articles is terminated and, if necessary, traffic records are shared with judicial institutions under Law No. 5651.

National Academic Network and Information Center (ULAKBIM) Use Policy Agreement

Definitions

1 - Purpose

Article 1 -The purpose of this directive is to determine the rules and principles regarding the use of İstanbul Kültür University's information resources.

2 - Scope

Article 2 - This directive covers all activities of our university’s academic and administrative staff and students carried out with all kinds of information and communication means. Every user at our university must comply with these provisions.

3 - Information Resources and Principles of Usage

Article 3 -

a)      In order to protect the legal entity of İstanbul Kültür University and to ensure the safety of the system, the Information Systems and Technology Department can inspect, monitor all kinds of services, and take restrictive measures on all machines when required, within the scope of the laws and regulations of this directive.

 b)     The Information Systems and Technology Department may prevent users from accessing certain harmful sites on the internet and may prevent the use of some file types and programs in terms of content (such as image files, audio files, kazaa, e-donkey, etc.).

 c)     The e-mail account passwords and the sharing and program use passwords of the computers on the network are a control tool that allows the users to see whether they have permission to access the information they want to access. When choosing a password, be careful that it is of sufficient length (at least 8 characters), never choose a word that can be found in any dictionary, use symbols (@, $, !...), use a separate password for each account, and be sure to change passwords at intervals. The user acknowledges that the right for service belongs only to the user; that the private and confidential password and username for the use of this right shall not be transferred to or used by anyone else; it will be immediately changed when there is even a doubt that someone may have learned it; otherwise, the user will be responsible for all processes and cannot claim that they have not used it.

 d)     In the e-mail service provided by IST, attachments are filtered, the IP addresses of computers that send spam and virus are blocked, and e-mail attachments with the extensions ".pif, .scr, .vbs" are automatically blocked. The IST can change these file extensions or add new file extensions if it deems it to be necessary.

e)    The IST only supports Microsoft Outlook. Users must use this software to send messages. The Outlook Web Access is a service that allows users outside the campus to read their mails easily. Outlook Web Access is not a service in the same category as the above programs.

 f)     Users may not use the e-mail account of another system's e-mail server or another user's e-mail account to send messages without the explicit permission of the person concerned. They cannot conduct activities, such as intentional unauthorized use, destroying others’ data, harming personal information, destroying others' work, or sending unwanted messages such as commercial advertisements and news announcements.

g)      Legal responsibilities which may arise from the documents contained in the users' e-mail accounts and computers and the broadcasting rights of any information belong entirely to the user.

 h)    Users cannot multiplex by connecting a Switch, Access Point, Router and similar devices to the ports outside the network centers determined within the campus network beyond the knowledge of the IST.

 i)     Users cannot duplicate an IP on a single computer by performing IP duplication at the network center in their unit or behind their own ports and cannot assign IP numbers to their computers other than the IP groups that the IST specifies.

 j)    The installation and use of any unlicensed and illegal software is strictly prohibited.

 4 - Implementation and Sanctions

Article 4 -  In case the information resources are used contrary to the General Principles, İKÜ authorities may implement one or more of the following processes with or without adherence to the below order, based on its intensity, the extent of the damage to resources or persons/institutions, and repetition.

■ Busyness

■ The extent of damage to resources or people / institutions

■ According to the repetition, the following procedures (one or more) may be applied in/out of order.

■The user is warned verbally and/or in writing,

■ Information resources allocated to the user may be closed for a limited or unlimited period,

■ Academic/administrative investigative mechanisms within the university may be mobilized,

■ Judiciary mechanisms may be mobilized.

Conditions in which usage and user definitions are inadequate and conditions that are not defined within the "Information Resources Use Policies" document are evaluated by the university. 

5 - Privacy

Article 5 - The information of the person who is subject to legal action is confidential and is not shared with anyone other than the Rectorship and the University Executive Board. Legal action is taken against those who violate this rule.

 6 - Execution

Article 6 -These rules are executed by the İstanbul Kültür University Rectorship.