Body
Logins from outside the United States
The University of Baltimore is dedicated to protecting the accounts and data of its community members. Cybercriminals frequently use compromised computers and networks located around the world to attempt unauthorized access to accounts. Logins originating from countries outside the United States may present a higher risk because they can be more difficult to verify and are sometimes associated with fraudulent activity. To help protect UBalt data, additional security controls are applied to international access.
Email and Microsoft Applications
Blocking logins from other countries plays a role in protecting our UBalt accounts. Compared to VPN, UBalt’s Microsoft 365 tenant is used more broadly by the UBalt community and needs to be accessed while traveling. UBalt’s stance is to only block Microsoft 365 logins from countries who may be a serious cyber threat. Blocking Microsoft 365 logins from these countries will also block logins to other applications that use Microsoft as a single sign-on portal. Examples of these applications include:
- Microsoft Office (including Outlook email)
- MyUBalt Portal
- Workday
There are exclusions for individuals that are traveling or need permanent access from these locations. To gain access, a user will need to submit a Call Center ticket with their travel details.
Note: We are not blocking email from these countries unless they are being blocked by automated filters already.
Countires Where Logins are Blocked
For security reasons, direct access to University services may be blocked from certain countries. Restrictions are reviewed periodically based on evolving cybersecurity threats and regulatory requirements.
UBalt VPN
UBalt’s VPN is sensitive to abuse by malicious actors due to the nature of VPNs allowing direct access to our network. By default, access from all countries outside the U.S. may be restricted. If there is a legitimate business or academic need, travelers can request an exception through a Call Center ticket before departure. Early requests are strongly recommended to avoid access disruptions.
Best Practices
- Confirm your multi-factor authentication (MFA) is enabled and working on your phone before you leave.
- Travel VPN:
- A commercial VPN can be used on your phone and laptop while traveling. They are typically low cost but accounts are not provided by OTS. Recommended VPNs to use are:
- Use a blank phone or computer if possible to eliminate the potential for data loss.
- Update your laptop, phone, browser, and Microsoft applications before traveling.
- Keep devices with you at all times and do not leave them unattended.
- Connect to only trusted Wi-Fi networks when possible.
- Be cautious of phishing emails, unexpected text messages, and requests for credentials.
- Lock your device when not in use.
- Back up important files before traveling.