Can my department set up a proxy server to allow access to restricted resources or other remote access services?
Because proxy servers can be configured to use network address translation (NAT) in which the IP address assigned to any one end-user device cannot be determined through normal audit procedures, there is no means by which to track network abuse or troubleshoot network problems. It is expected that each end-user device connected to PPS will be configured with a single IP address assigned from one of the District’s networks. Proxy servers defeat the District’s centralized authentication services (Kerberos and Central Directory Service) by allowing for the creation and distribution of user accounts to individuals who may not be affiliated with the Portland School District. Using these accounts, these individuals may be able to obtain access to services whose use is restricted only to District affiliates. In addition, because automated account management services may not exist on these servers, these unaffiliated individuals may be able to retain access to District services for an indefini
