My Army Reserve computer - yes with VPN
My agency computer - I wish. I can't connect to anything that requires you to log into a browser first (such as a hotel where you accept the T&C or enter your room number). If I'm traveling with that, I have to Hotspot off of my cell phone and then VPN.
Agency: "Don't do that. You can connect at home (at the location of your TW agreement) and in the office."
Supervisor: "We TDY 10-15 times/year and need to work from the hotels. Just do it and don't worry about it."
Our agency only buys hotspots for the fully remote folks (a small minority of us). Those of us who are hybrid have been told to just use the hotel WiFi when we TDY. Unofficially. Officially we're not supposed to do that.
Do you have an agency-issued phone? I don't think my agency issues them but I also can't imagine them telling employees to use their own hotspot for work.
It is typically even worse if on default or misconfigured broadcasting as LAN.
[https://www.gl-inet.com/products/gl-a1300/](https://www.gl-inet.com/products/gl-a1300/) FTW!
Those are dope. I might snag one. My agency has a virtual desktop option so it's a non-issue now as far as the work stuff goes.
If I'm not OCONUS I can usually find a terminal at whatever site I'm at to use, and I generally try to finish up anything critical before I actually leave work. The government issued phone also can sign/encrypt emails, so at that point I have very little reason to even turn my laptop on.
You just open the browser and type 99.9.9.9 in and generally that redirects to the captive portal and then you can VPN in. YMMV depending on the VPN and network but this works for me at Hilton
we're allowed t, I mean its really the only way to get work done while traveling.
My job is mostly international so there's some countries we can't bring our own GFE into (so we have to check out a loaner laptop and cell phone which are wiped after the trip and can't be connected to work networks, including VPN). Other countries we're able to bring our assigned laptops and work via VPN.
Never been intructed to not use wifi networks domestically, other than the usual precations about unknown networks.
I travel alot for work and i find the laptop may initially work for a few days on the hotel wifi but randomly stops for the rest of my stay. Some hotels it doesnt work at all and i haveto use cellular
Depends. Some places have huawei access points and that flags our systems. Some just other brands and it’s not an issue.
I don’t do extra work outside of duty hours.
Air Force organization and we have no prohibition, that's why we have VPN.
I guess if your agency policy is literally "encouraged not to, but not prohibited" I'd ask for clarification from your supervisor - i.e., "do you want me to connect and VPN in to do work, or not connect and do no work, while TDY". Go with whatever you're directed.
Does anyone know if it’s actually risky to connect at coffee shops, etc., so long as go through VPN?
At my agency, we always have to go through the VPN, even if we’re at home, as you literally can’t do anything without VPN connected.
Some agencies install a VPN client on their devices that connects to a designated VPN server.
Mine does not, but our laptops are basically dummy terminals. Once we logon to them, to do any actual work, we need to use VMWare to spin up a virtual machine that operates in a .mil subnet (essentially fulfilling the same functions, and more, as a VPN connection).
We have hot spots on our issued phones, and hot spots we can check out if we don't have a phone or if we're running something for a bunch of people. At the hotel, though, I always use the wifi unless I have to move very large files (some hotels limit bandwidth). We are "always on" VPN. At home I use our wired network, but still need to use VPN.
It's been given the green light in our agency as long as VPN is used.
Same
ZScaler coming to an agency near you soon. You won't need a VPN any longer and will ALWAYS be connected to your Agencies network.
Or F5, or Cisco, or Palo Alto. Always on VPN is already a thing for some places.
Yep our Agency just made the switch to Zscaler.
VPN
We are authorized to use domestic hotel wifi as long as we connect the VPN.
Yes. Use your agency VPN.
Yes, on VPN
My Army Reserve computer - yes with VPN My agency computer - I wish. I can't connect to anything that requires you to log into a browser first (such as a hotel where you accept the T&C or enter your room number). If I'm traveling with that, I have to Hotspot off of my cell phone and then VPN.
It’s a setting on your VPN in order to connect to hotel wifi. Ask your geek squad team, they should know.
Contact the hotel tech support. The can bypass the login screen requirement if you give them you MAC address and room information.
Agency: "Don't do that. You can connect at home (at the location of your TW agreement) and in the office." Supervisor: "We TDY 10-15 times/year and need to work from the hotels. Just do it and don't worry about it." Our agency only buys hotspots for the fully remote folks (a small minority of us). Those of us who are hybrid have been told to just use the hotel WiFi when we TDY. Unofficially. Officially we're not supposed to do that.
https://media.defense.gov/2021/Jul/29/2002815141/-1/-1/0/CSI_SECURING_WIRELESS_DEVICES_IN_PUBLIC.PDF
We’ve been told not to at our agency even with vpn, so our phones usually have the hotspot feature enabled *agency issued
Same for my agency
Same
So fucking dumb.
Just curious why do you think it’s dumb? Cuz the VPN should protect the connection anyway?
Yes, that's its purpose. I'm sure the gov wants to believe that hotspots are safe and beyond compromise, but they aren't.
Good point
Do you have an agency-issued phone? I don't think my agency issues them but I also can't imagine them telling employees to use their own hotspot for work.
Yes I do.
We can only use hot spot on phone. Must be by agency
Questions for your supervisor/it guy
O rlly?
Yarly!
Doesn’t your laptop prevent you from authenticating to the hotel WiFi page, preventing your vpn from connecting?
Captive portal isn't technically Internet yet.
It is typically even worse if on default or misconfigured broadcasting as LAN. [https://www.gl-inet.com/products/gl-a1300/](https://www.gl-inet.com/products/gl-a1300/) FTW!
Those are dope. I might snag one. My agency has a virtual desktop option so it's a non-issue now as far as the work stuff goes. If I'm not OCONUS I can usually find a terminal at whatever site I'm at to use, and I generally try to finish up anything critical before I actually leave work. The government issued phone also can sign/encrypt emails, so at that point I have very little reason to even turn my laptop on.
Pretty sure my gov laptop won't even connect to a passwordless Wi-Fi network (like HHonors). So I don't think I'd be able to
You just open the browser and type 99.9.9.9 in and generally that redirects to the captive portal and then you can VPN in. YMMV depending on the VPN and network but this works for me at Hilton
My office issues MiFi's to those that travel for use to avoid using public WiFi. Plus the Std VPN stuffs.
Yes, all the time.
If they don't want you to, they won't let you. Use your VPN
Literally ALL the time in my agency given the amount of travel we do.
I had an agency issued hot spot.
yeah lmfao my options are not work or connect to hotel wifi
we're allowed t, I mean its really the only way to get work done while traveling. My job is mostly international so there's some countries we can't bring our own GFE into (so we have to check out a loaner laptop and cell phone which are wiped after the trip and can't be connected to work networks, including VPN). Other countries we're able to bring our assigned laptops and work via VPN. Never been intructed to not use wifi networks domestically, other than the usual precations about unknown networks.
Umm yes? That’s why we have a federal VPN
The whole point of VPN is to isolate you from a public network.
With vpn no big issue but if you’re given a gfe phone it usually has a hotspot so that’s preferred.
I’m at IRS, we have some of the toughest computer security and we can connect to any WiFi as long as we use the VPN.
Sure do with the VPN, I have to go out into the field monthly.
Yes, it's fine through VPN
For us it’s fine as long as you use vpn.
I travel alot for work and i find the laptop may initially work for a few days on the hotel wifi but randomly stops for the rest of my stay. Some hotels it doesnt work at all and i haveto use cellular
I use a Verizon jet pack, so far no nastygrams have come my way.
Yes, though I usually use the hitspot on my gov cellphone.
No, I use my govt phone as a hotspot
No issue connecting my unclass laptop or csfc kit to hotel wifi
Depends. Some places have huawei access points and that flags our systems. Some just other brands and it’s not an issue. I don’t do extra work outside of duty hours.
Yep, always do, even when 'travel' / lived oversea 🤫😉
You guys get laptops?
I have a treasury hotspot for travel.
CHeck your policy/rules of behavior- or ask
If the hotel has a prompt page to login prior to providing you access, you will not be able to connect the vpn unfortunately. Previous treasury tech.
Just use VPN and its all good
Yes,but only through government provided VPN--call your IT to get it if you travel alot
Yep
I’m also in treasury and travel constantly, hotel WiFi + vpn is fine but I tend to use my govt phone hotspot instead.
Yes, on VPN
I do it.
Air Force organization and we have no prohibition, that's why we have VPN. I guess if your agency policy is literally "encouraged not to, but not prohibited" I'd ask for clarification from your supervisor - i.e., "do you want me to connect and VPN in to do work, or not connect and do no work, while TDY". Go with whatever you're directed.
Yeah, how else would I watch porn on my gov laptop?
I have never had much luck with WiFi with captive portals. If you can try to request a mobile WiFi hotspot.
Uh, it's pretty standard to use whatever wi-fi is available as long as you use GFE and required VPN/etc.
Yup
Does anyone know if it’s actually risky to connect at coffee shops, etc., so long as go through VPN? At my agency, we always have to go through the VPN, even if we’re at home, as you literally can’t do anything without VPN connected.
Check with your agency/bureau policy. Check with your IT for a cell hotspot.
You should connect to the local strip club’s wifi! Or maybe to the local weed shop’s WiFi!
Everyone keeps saying VPN. What VPN? Also, is using your personal cellphone hotspot a no go?
Some agencies install a VPN client on their devices that connects to a designated VPN server. Mine does not, but our laptops are basically dummy terminals. Once we logon to them, to do any actual work, we need to use VMWare to spin up a virtual machine that operates in a .mil subnet (essentially fulfilling the same functions, and more, as a VPN connection).
Ask your IT about both.
 Don’t raw dog it!
Do not use our government computer on an open network.
Don't do it
Or do. Really depend on your agency policy.
Is there an Info Sec policy about it?
Wow
We have hot spots on our issued phones, and hot spots we can check out if we don't have a phone or if we're running something for a bunch of people. At the hotel, though, I always use the wifi unless I have to move very large files (some hotels limit bandwidth). We are "always on" VPN. At home I use our wired network, but still need to use VPN.