CINXE.COM

Maintaining access to internal services during a continuity event - Jisc

<!DOCTYPE html><html lang="en-GB"><head><script type="text/javascript" src="/_static/js/bundle-playback.js?v=HxkREWBo" charset="utf-8"></script> <script type="text/javascript" src="/_static/js/wombat.js?v=txqj7nKC" charset="utf-8"></script> <script>window.RufflePlayer=window.RufflePlayer||{};window.RufflePlayer.config={"autoplay":"on","unmuteOverlay":"hidden"};</script> <script type="text/javascript" src="/_static/js/ruffle/ruffle.js"></script> <script type="text/javascript"> __wm.init("http://web.archive.org/web"); __wm.wombat("https://www.jisc.ac.uk/guides/maintaining-access-to-internal-services-during-a-continuity-event","20240415215647","http://web.archive.org/","web","/_static/", "1713218207"); </script> <link rel="stylesheet" type="text/css" href="/_static/css/banner-styles.css?v=S1zqJCYt" /> <link rel="stylesheet" type="text/css" href="/_static/css/iconochive.css?v=3PDvdIFv" /> <!-- End Wayback Rewrite JS Include --> <meta charset="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><title>Maintaining access to internal services during a continuity event - Jisc</title><meta name="description" content="How to make sure your remote users can access services during business continuity events."/><meta name="twitter:card" content="summary_large_image"/><meta name="twitter:site" content="@jisc"/><meta property="twitter:image"/><meta property="twitter:image:alt" content=""/><meta property="og:title" content="Maintaining access to internal services during a continuity event - Jisc"/><meta property="og:description" content="How to make sure your remote users can access services during business continuity events."/><meta property="og:type" content="website"/><meta property="og:site_name" content="Jisc"/><meta property="og:url" content="http://web.archive.org/web/20240415215647/https://beta.jisc.ac.uk/guides/maintaining-access-to-internal-services-during-a-continuity-event"/><meta property="og:image"/><meta property="og:image:alt" content=""/><meta name="next-head-count" content="15"/><meta http-equiv="Content-Security-Policy" content=""/><meta name="robots" content="index, follow"/><meta name="google-site-verification" content="UNqcoVblscrmuOfPyGUTeRMyNRcroUK_U9ghx-PFl0Q"/><link rel="apple-touch-icon" sizes="180x180" href="/web/20240415215647im_/https://www.jisc.ac.uk/apple-touch-icon.png"/><link rel="manifest" href="/web/20240415215647/https://www.jisc.ac.uk/site.webmanifest"/><link rel="preconnect" href="http://web.archive.org/web/20240415215647/https://fonts.gstatic.com/" crossorigin/><link rel="preload" href="/web/20240415215647/https://www.jisc.ac.uk/_next/static/css/6a19c02666409538.css" as="style"/><link rel="stylesheet" href="/web/20240415215647cs_/https://www.jisc.ac.uk/_next/static/css/6a19c02666409538.css" data-n-g=""/><noscript data-n-css=""></noscript><script defer="" nomodule="" src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js"></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/webpack-cefddfb7403e4fd5.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/framework-314c182fa7e2bf37.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/main-fc6cb5345c9e5beb.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/pages/_app-76f0ba6c88a8fb1c.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/653-ab527e64a1c38342.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/5785-09de40d3ceec2832.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/6649-3814b27d2b55eb1e.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/7758-4a39081cc27ad0a8.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/7433-f2f72fd155e6278d.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/8935-fb14791a0ae63c1d.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/542-0dde8f6e342135aa.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/7984-7ca9dcf15140d729.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/8239-cfd059a1d55b74c4.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/7800-62912adc3062423c.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/9177-3944c7951ce31291.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/4031-79cde5b975e5a646.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/607-c309469adec1eb64.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/3262-399033df08b8938d.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/4477-cb03fde236f9e973.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/2825-7b7823b0d881c569.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/4210-1cb917a88c3dc5fb.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/7418-e678a88c1826ce45.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/9633-76a16f88549ee0c3.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/3349-cd6b43e96eda7e87.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/6920-5d81c1e9120ee70c.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/1785-655b127f25a8a109.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/1093-0a0de102ac821f9a.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/8812-05d94f4587379f9e.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/chunks/pages/%5B...path%5D-3940df621b3874f4.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/xx_QiHckg3_1c5ZZF_g2t/_buildManifest.js" defer=""></script><script src="/web/20240415215647js_/https://www.jisc.ac.uk/_next/static/xx_QiHckg3_1c5ZZF_g2t/_ssgManifest.js" defer=""></script><style id="jss-server-side">.MuiPaper-root { color: #333; transition: box-shadow 300ms cubic-bezier(0.4, 0, 0.2, 1) 0ms; background-color: #fff; } .MuiPaper-rounded { border-radius: 4px; } .MuiPaper-outlined { border: 1px solid rgba(0, 0, 0, 0.12); } .MuiPaper-elevation0 { box-shadow: none; } .MuiPaper-elevation1 { box-shadow: 0px 2px 1px -1px rgba(0,0,0,0.2),0px 1px 1px 0px rgba(0,0,0,0.14),0px 1px 3px 0px rgba(0,0,0,0.12); } .MuiPaper-elevation2 { box-shadow: 0px 3px 1px -2px rgba(0,0,0,0.2),0px 2px 2px 0px rgba(0,0,0,0.14),0px 1px 5px 0px rgba(0,0,0,0.12); } .MuiPaper-elevation3 { box-shadow: 0px 3px 3px -2px rgba(0,0,0,0.2),0px 3px 4px 0px rgba(0,0,0,0.14),0px 1px 8px 0px rgba(0,0,0,0.12); } .MuiPaper-elevation4 { box-shadow: 0px 2px 4px -1px rgba(0,0,0,0.2),0px 4px 5px 0px rgba(0,0,0,0.14),0px 1px 10px 0px rgba(0,0,0,0.12); } .MuiPaper-elevation5 { box-shadow: 0px 3px 5px -1px rgba(0,0,0,0.2),0px 5px 8px 0px rgba(0,0,0,0.14),0px 1px 14px 0px rgba(0,0,0,0.12); } .MuiPaper-elevation6 { box-shadow: 0px 3px 5px -1px rgba(0,0,0,0.2),0px 6px 10px 0px rgba(0,0,0,0.14),0px 1px 18px 0px rgba(0,0,0,0.12); } .MuiPaper-elevation7 { box-shadow: 0px 4px 5px -2px rgba(0,0,0,0.2),0px 7px 10px 1px rgba(0,0,0,0.14),0px 2px 16px 1px rgba(0,0,0,0.12); } .MuiPaper-elevation8 { box-shadow: 0px 5px 5px -3px rgba(0,0,0,0.2),0px 8px 10px 1px rgba(0,0,0,0.14),0px 3px 14px 2px rgba(0,0,0,0.12); } .MuiPaper-elevation9 { box-shadow: 0px 5px 6px -3px rgba(0,0,0,0.2),0px 9px 12px 1px rgba(0,0,0,0.14),0px 3px 16px 2px rgba(0,0,0,0.12); } .MuiPaper-elevation10 { box-shadow: 0px 6px 6px -3px rgba(0,0,0,0.2),0px 10px 14px 1px rgba(0,0,0,0.14),0px 4px 18px 3px rgba(0,0,0,0.12); } .MuiPaper-elevation11 { box-shadow: 0px 6px 7px -4px rgba(0,0,0,0.2),0px 11px 15px 1px rgba(0,0,0,0.14),0px 4px 20px 3px rgba(0,0,0,0.12); } .MuiPaper-elevation12 { box-shadow: 0px 7px 8px -4px rgba(0,0,0,0.2),0px 12px 17px 2px rgba(0,0,0,0.14),0px 5px 22px 4px rgba(0,0,0,0.12); } .MuiPaper-elevation13 { box-shadow: 0px 7px 8px -4px rgba(0,0,0,0.2),0px 13px 19px 2px rgba(0,0,0,0.14),0px 5px 24px 4px rgba(0,0,0,0.12); } .MuiPaper-elevation14 { box-shadow: 0px 7px 9px -4px rgba(0,0,0,0.2),0px 14px 21px 2px rgba(0,0,0,0.14),0px 5px 26px 4px rgba(0,0,0,0.12); } .MuiPaper-elevation15 { box-shadow: 0px 8px 9px -5px rgba(0,0,0,0.2),0px 15px 22px 2px rgba(0,0,0,0.14),0px 6px 28px 5px rgba(0,0,0,0.12); } .MuiPaper-elevation16 { box-shadow: 0px 8px 10px -5px rgba(0,0,0,0.2),0px 16px 24px 2px rgba(0,0,0,0.14),0px 6px 30px 5px rgba(0,0,0,0.12); } .MuiPaper-elevation17 { box-shadow: 0px 8px 11px -5px rgba(0,0,0,0.2),0px 17px 26px 2px rgba(0,0,0,0.14),0px 6px 32px 5px rgba(0,0,0,0.12); } .MuiPaper-elevation18 { box-shadow: 0px 9px 11px -5px rgba(0,0,0,0.2),0px 18px 28px 2px rgba(0,0,0,0.14),0px 7px 34px 6px rgba(0,0,0,0.12); } .MuiPaper-elevation19 { box-shadow: 0px 9px 12px -6px rgba(0,0,0,0.2),0px 19px 29px 2px rgba(0,0,0,0.14),0px 7px 36px 6px rgba(0,0,0,0.12); } .MuiPaper-elevation20 { box-shadow: 0px 10px 13px -6px rgba(0,0,0,0.2),0px 20px 31px 3px rgba(0,0,0,0.14),0px 8px 38px 7px rgba(0,0,0,0.12); } .MuiPaper-elevation21 { box-shadow: 0px 10px 13px -6px rgba(0,0,0,0.2),0px 21px 33px 3px rgba(0,0,0,0.14),0px 8px 40px 7px rgba(0,0,0,0.12); } .MuiPaper-elevation22 { box-shadow: 0px 10px 14px -6px rgba(0,0,0,0.2),0px 22px 35px 3px rgba(0,0,0,0.14),0px 8px 42px 7px rgba(0,0,0,0.12); } .MuiPaper-elevation23 { box-shadow: 0px 11px 14px -7px rgba(0,0,0,0.2),0px 23px 36px 3px rgba(0,0,0,0.14),0px 9px 44px 8px rgba(0,0,0,0.12); } .MuiPaper-elevation24 { box-shadow: 0px 11px 15px -7px rgba(0,0,0,0.2),0px 24px 38px 3px rgba(0,0,0,0.14),0px 9px 46px 8px rgba(0,0,0,0.12); } .MuiTypography-root { margin: 0; } .MuiTypography-body2 { font-size: .875rem; font-family: "Roboto", "Helvetica", "Arial", sans-serif; font-weight: 400; line-height: 1.428571428571429rem; letter-spacing: unset; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; } .MuiTypography-body2 b { font-weight: bolder; } .MuiTypography-body2 strong { font-weight: bolder; } .MuiTypography-body1 { font-size: 1rem; font-family: "Roboto", "Helvetica", "Arial", sans-serif; font-weight: 400; line-height: 1.5rem; letter-spacing: unset; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; } .MuiTypography-body1 b { font-weight: bolder; } .MuiTypography-body1 strong { font-weight: bolder; } .MuiTypography-caption { font-size: 0.75rem; font-family: "Roboto", "Helvetica", "Arial", sans-serif; font-weight: 400; line-height: 1.66; letter-spacing: 0.03333em; } .MuiTypography-button { font-size: 0.875rem; font-family: "Roboto", "Helvetica", "Arial", sans-serif; font-weight: 500; line-height: 1.75; letter-spacing: 0.02857em; text-transform: uppercase; } .MuiTypography-h1 { font-size: 2.5rem; font-family: "Roboto", "Helvetica", "Arial", sans-serif; font-weight: 400; line-height: 3.5rem; letter-spacing: unset; } @media (min-width:600px) { .MuiTypography-h1 { font-size: 2.75rem; line-height: 3.5rem; } } @media (min-width:960px) { .MuiTypography-h1 { font-size: 3rem; line-height: 4rem; } } .MuiTypography-h2 { font-size: 2rem; font-family: "Roboto", "Helvetica", "Arial", sans-serif; font-weight: 400; line-height: 3rem; letter-spacing: unset; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; } @media (min-width:600px) { .MuiTypography-h2 { font-size: 2.25rem; line-height: 3rem; } } @media (min-width:960px) { .MuiTypography-h2 { font-size: 2.5rem; line-height: 3.5rem; } } .MuiTypography-h2 b { font-weight: bolder; } .MuiTypography-h2 strong { font-weight: bolder; } .MuiTypography-h3 { font-size: 1.5rem; font-family: "Roboto", "Helvetica", "Arial", sans-serif; font-weight: 500; line-height: 2rem; letter-spacing: unset; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; } @media (min-width:600px) { .MuiTypography-h3 { font-size: 1.75rem; line-height: 2.5rem; } } @media (min-width:960px) { .MuiTypography-h3 { font-size: 2rem; line-height: 3rem; } } .MuiTypography-h3 b { font-weight: bolder; } .MuiTypography-h3 strong { font-weight: bolder; } .MuiTypography-h4 { font-size: 1.25rem; font-family: "Roboto", "Helvetica", "Arial", sans-serif; font-weight: 400; line-height: 2rem; letter-spacing: unset; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; } @media (min-width:960px) { .MuiTypography-h4 { font-size: 1.5rem; line-height: 2rem; } } .MuiTypography-h4 b { font-weight: bolder; } .MuiTypography-h4 strong { font-weight: bolder; } .MuiTypography-h5 { font-size: 1rem; font-family: "Roboto", "Helvetica", "Arial", sans-serif; font-weight: 500; line-height: 1.5rem; letter-spacing: unset; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; } @media (min-width:960px) { .MuiTypography-h5 { font-size: 1.25rem; line-height: 2rem; } } .MuiTypography-h5 b { font-weight: bolder; } .MuiTypography-h5 strong { font-weight: bolder; } .MuiTypography-h6 { font-size: .875rem; font-family: "Roboto", "Helvetica", "Arial", sans-serif; font-weight: 700; line-height: 1.5rem; letter-spacing: unset; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; } .MuiTypography-h6 b { font-weight: bolder; } .MuiTypography-h6 strong { font-weight: bolder; } .MuiTypography-subtitle1 { font-size: 1rem; font-family: "Roboto", "Helvetica", "Arial", sans-serif; font-weight: 400; line-height: 1.75; letter-spacing: 0.00938em; } .MuiTypography-subtitle2 { font-size: 1.25rem; font-family: "Roboto", "Helvetica", "Arial", sans-serif; font-weight: 400; line-height: 2rem; letter-spacing: unset; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; } .MuiTypography-subtitle2 b { font-weight: bolder; } .MuiTypography-subtitle2 strong { font-weight: bolder; } .MuiTypography-overline { font-size: 0.75rem; font-family: "Roboto", "Helvetica", "Arial", sans-serif; font-weight: 400; line-height: 2.66; letter-spacing: 0.08333em; text-transform: uppercase; } .MuiTypography-srOnly { width: 1px; height: 1px; overflow: hidden; position: absolute; } .MuiTypography-alignLeft { text-align: left; } .MuiTypography-alignCenter { text-align: center; } .MuiTypography-alignRight { text-align: right; } .MuiTypography-alignJustify { text-align: justify; } .MuiTypography-noWrap { overflow: hidden; white-space: nowrap; text-overflow: ellipsis; } .MuiTypography-gutterBottom { margin-bottom: 1.5rem; } .MuiTypography-paragraph { margin-bottom: 16px; } .MuiTypography-colorInherit { color: inherit; } .MuiTypography-colorPrimary { color: #007dba; } .MuiTypography-colorSecondary { color: #00857d; } .MuiTypography-colorTextPrimary { color: #333; } .MuiTypography-colorTextSecondary { color: #666; } .MuiTypography-colorError { color: #f44336; } .MuiTypography-displayInline { display: inline; } .MuiTypography-displayBlock { display: block; } .MuiContainer-root { width: 100%; display: block; box-sizing: border-box; margin-left: auto; margin-right: auto; padding-left: 1rem; padding-right: 1rem; } @media (min-width:600px) { .MuiContainer-root { padding-left: 1.5rem; padding-right: 1.5rem; } } .MuiContainer-disableGutters { padding-left: 0; padding-right: 0; } @media (min-width:600px) { .MuiContainer-fixed { max-width: 600px; } } @media (min-width:960px) { .MuiContainer-fixed { max-width: 960px; } } @media (min-width:1280px) { .MuiContainer-fixed { max-width: 1280px; } } @media (min-width:1920px) { .MuiContainer-fixed { max-width: 1920px; } } @media (min-width:0px) { .MuiContainer-maxWidthXs { max-width: 444px; } } @media (min-width:600px) { .MuiContainer-maxWidthSm { max-width: 600px; } } @media (min-width:960px) { .MuiContainer-maxWidthMd { max-width: 960px; } } @media (min-width:1280px) { .MuiContainer-maxWidthLg { max-width: 1280px; } } @media (min-width:1920px) { .MuiContainer-maxWidthXl { max-width: 1920px; } } .MuiGrid-container { width: 100%; display: flex; flex-wrap: wrap; box-sizing: border-box; } .MuiGrid-item { margin: 0; box-sizing: border-box; } .MuiGrid-zeroMinWidth { min-width: 0; } .MuiGrid-direction-xs-column { flex-direction: column; } .MuiGrid-direction-xs-column-reverse { flex-direction: column-reverse; } .MuiGrid-direction-xs-row-reverse { flex-direction: row-reverse; } .MuiGrid-wrap-xs-nowrap { flex-wrap: nowrap; } .MuiGrid-wrap-xs-wrap-reverse { flex-wrap: wrap-reverse; } .MuiGrid-align-items-xs-center { align-items: center; } .MuiGrid-align-items-xs-flex-start { align-items: flex-start; } .MuiGrid-align-items-xs-flex-end { align-items: flex-end; } .MuiGrid-align-items-xs-baseline { align-items: baseline; } .MuiGrid-align-content-xs-center { align-content: center; } .MuiGrid-align-content-xs-flex-start { align-content: flex-start; } .MuiGrid-align-content-xs-flex-end { align-content: flex-end; } .MuiGrid-align-content-xs-space-between { align-content: space-between; } .MuiGrid-align-content-xs-space-around { align-content: space-around; } .MuiGrid-justify-content-xs-center { justify-content: center; } .MuiGrid-justify-content-xs-flex-end { justify-content: flex-end; } .MuiGrid-justify-content-xs-space-between { justify-content: space-between; } .MuiGrid-justify-content-xs-space-around { justify-content: space-around; } .MuiGrid-justify-content-xs-space-evenly { justify-content: space-evenly; } .MuiGrid-spacing-xs-0 { width: calc(100% + 0rem); margin: -0rem; } .MuiGrid-spacing-xs-0 > .MuiGrid-item { padding: 0rem; } .MuiGrid-spacing-xs-1 { width: calc(100% + 0.5rem); margin: -0.25rem; } .MuiGrid-spacing-xs-1 > .MuiGrid-item { padding: 0.25rem; } .MuiGrid-spacing-xs-2 { width: calc(100% + 1rem); margin: -0.5rem; } .MuiGrid-spacing-xs-2 > .MuiGrid-item { padding: 0.5rem; } .MuiGrid-spacing-xs-3 { width: calc(100% + 1.5rem); margin: -0.75rem; } .MuiGrid-spacing-xs-3 > .MuiGrid-item { padding: 0.75rem; } .MuiGrid-spacing-xs-4 { width: calc(100% + 2rem); margin: -1rem; } .MuiGrid-spacing-xs-4 > .MuiGrid-item { padding: 1rem; } .MuiGrid-spacing-xs-5 { width: calc(100% + 2.5rem); margin: -1.25rem; } .MuiGrid-spacing-xs-5 > .MuiGrid-item { padding: 1.25rem; } .MuiGrid-spacing-xs-6 { width: calc(100% + 3rem); margin: -1.5rem; } .MuiGrid-spacing-xs-6 > .MuiGrid-item { padding: 1.5rem; } .MuiGrid-spacing-xs-7 { width: calc(100% + 3.5rem); margin: -1.75rem; } .MuiGrid-spacing-xs-7 > .MuiGrid-item { padding: 1.75rem; } .MuiGrid-spacing-xs-8 { width: calc(100% + 4rem); margin: -2rem; } .MuiGrid-spacing-xs-8 > .MuiGrid-item { padding: 2rem; } .MuiGrid-spacing-xs-9 { width: calc(100% + 4.5rem); margin: -2.25rem; } .MuiGrid-spacing-xs-9 > .MuiGrid-item { padding: 2.25rem; } .MuiGrid-spacing-xs-10 { width: calc(100% + 5rem); margin: -2.5rem; } .MuiGrid-spacing-xs-10 > .MuiGrid-item { padding: 2.5rem; } .MuiGrid-grid-xs-auto { flex-grow: 0; max-width: none; flex-basis: auto; } .MuiGrid-grid-xs-true { flex-grow: 1; max-width: 100%; flex-basis: 0; } .MuiGrid-grid-xs-1 { flex-grow: 0; max-width: 8.333333%; flex-basis: 8.333333%; } .MuiGrid-grid-xs-2 { flex-grow: 0; max-width: 16.666667%; flex-basis: 16.666667%; } .MuiGrid-grid-xs-3 { flex-grow: 0; max-width: 25%; flex-basis: 25%; } .MuiGrid-grid-xs-4 { flex-grow: 0; max-width: 33.333333%; flex-basis: 33.333333%; } .MuiGrid-grid-xs-5 { flex-grow: 0; max-width: 41.666667%; flex-basis: 41.666667%; } .MuiGrid-grid-xs-6 { flex-grow: 0; max-width: 50%; flex-basis: 50%; } .MuiGrid-grid-xs-7 { flex-grow: 0; max-width: 58.333333%; flex-basis: 58.333333%; } .MuiGrid-grid-xs-8 { flex-grow: 0; max-width: 66.666667%; flex-basis: 66.666667%; } .MuiGrid-grid-xs-9 { flex-grow: 0; max-width: 75%; flex-basis: 75%; } .MuiGrid-grid-xs-10 { flex-grow: 0; max-width: 83.333333%; flex-basis: 83.333333%; } .MuiGrid-grid-xs-11 { flex-grow: 0; max-width: 91.666667%; flex-basis: 91.666667%; } .MuiGrid-grid-xs-12 { flex-grow: 0; max-width: 100%; flex-basis: 100%; } @media (min-width:600px) { .MuiGrid-grid-sm-auto { flex-grow: 0; max-width: none; flex-basis: auto; } .MuiGrid-grid-sm-true { flex-grow: 1; max-width: 100%; flex-basis: 0; } .MuiGrid-grid-sm-1 { flex-grow: 0; max-width: 8.333333%; flex-basis: 8.333333%; } .MuiGrid-grid-sm-2 { flex-grow: 0; max-width: 16.666667%; flex-basis: 16.666667%; } .MuiGrid-grid-sm-3 { flex-grow: 0; max-width: 25%; flex-basis: 25%; } .MuiGrid-grid-sm-4 { flex-grow: 0; max-width: 33.333333%; flex-basis: 33.333333%; } .MuiGrid-grid-sm-5 { flex-grow: 0; max-width: 41.666667%; flex-basis: 41.666667%; } .MuiGrid-grid-sm-6 { flex-grow: 0; max-width: 50%; flex-basis: 50%; } .MuiGrid-grid-sm-7 { flex-grow: 0; max-width: 58.333333%; flex-basis: 58.333333%; } .MuiGrid-grid-sm-8 { flex-grow: 0; max-width: 66.666667%; flex-basis: 66.666667%; } .MuiGrid-grid-sm-9 { flex-grow: 0; max-width: 75%; flex-basis: 75%; } .MuiGrid-grid-sm-10 { flex-grow: 0; max-width: 83.333333%; flex-basis: 83.333333%; } .MuiGrid-grid-sm-11 { flex-grow: 0; max-width: 91.666667%; flex-basis: 91.666667%; } .MuiGrid-grid-sm-12 { flex-grow: 0; max-width: 100%; flex-basis: 100%; } } @media (min-width:960px) { .MuiGrid-grid-md-auto { flex-grow: 0; max-width: none; flex-basis: auto; } .MuiGrid-grid-md-true { flex-grow: 1; max-width: 100%; flex-basis: 0; } .MuiGrid-grid-md-1 { flex-grow: 0; max-width: 8.333333%; flex-basis: 8.333333%; } .MuiGrid-grid-md-2 { flex-grow: 0; max-width: 16.666667%; flex-basis: 16.666667%; } .MuiGrid-grid-md-3 { flex-grow: 0; max-width: 25%; flex-basis: 25%; } .MuiGrid-grid-md-4 { flex-grow: 0; max-width: 33.333333%; flex-basis: 33.333333%; } .MuiGrid-grid-md-5 { flex-grow: 0; max-width: 41.666667%; flex-basis: 41.666667%; } .MuiGrid-grid-md-6 { flex-grow: 0; max-width: 50%; flex-basis: 50%; } .MuiGrid-grid-md-7 { flex-grow: 0; max-width: 58.333333%; flex-basis: 58.333333%; } .MuiGrid-grid-md-8 { flex-grow: 0; max-width: 66.666667%; flex-basis: 66.666667%; } .MuiGrid-grid-md-9 { flex-grow: 0; max-width: 75%; flex-basis: 75%; } .MuiGrid-grid-md-10 { flex-grow: 0; max-width: 83.333333%; flex-basis: 83.333333%; } .MuiGrid-grid-md-11 { flex-grow: 0; max-width: 91.666667%; flex-basis: 91.666667%; } .MuiGrid-grid-md-12 { flex-grow: 0; max-width: 100%; flex-basis: 100%; } } @media (min-width:1280px) { .MuiGrid-grid-lg-auto { flex-grow: 0; max-width: none; flex-basis: auto; } .MuiGrid-grid-lg-true { flex-grow: 1; max-width: 100%; flex-basis: 0; } .MuiGrid-grid-lg-1 { flex-grow: 0; max-width: 8.333333%; flex-basis: 8.333333%; } .MuiGrid-grid-lg-2 { flex-grow: 0; max-width: 16.666667%; flex-basis: 16.666667%; } .MuiGrid-grid-lg-3 { flex-grow: 0; max-width: 25%; flex-basis: 25%; } .MuiGrid-grid-lg-4 { flex-grow: 0; max-width: 33.333333%; flex-basis: 33.333333%; } .MuiGrid-grid-lg-5 { flex-grow: 0; max-width: 41.666667%; flex-basis: 41.666667%; } .MuiGrid-grid-lg-6 { flex-grow: 0; max-width: 50%; flex-basis: 50%; } .MuiGrid-grid-lg-7 { flex-grow: 0; max-width: 58.333333%; flex-basis: 58.333333%; } .MuiGrid-grid-lg-8 { flex-grow: 0; max-width: 66.666667%; flex-basis: 66.666667%; } .MuiGrid-grid-lg-9 { flex-grow: 0; max-width: 75%; flex-basis: 75%; } .MuiGrid-grid-lg-10 { flex-grow: 0; max-width: 83.333333%; flex-basis: 83.333333%; } .MuiGrid-grid-lg-11 { flex-grow: 0; max-width: 91.666667%; flex-basis: 91.666667%; } .MuiGrid-grid-lg-12 { flex-grow: 0; max-width: 100%; flex-basis: 100%; } } @media (min-width:1920px) { .MuiGrid-grid-xl-auto { flex-grow: 0; max-width: none; flex-basis: auto; } .MuiGrid-grid-xl-true { flex-grow: 1; max-width: 100%; flex-basis: 0; } .MuiGrid-grid-xl-1 { flex-grow: 0; max-width: 8.333333%; flex-basis: 8.333333%; } .MuiGrid-grid-xl-2 { flex-grow: 0; max-width: 16.666667%; flex-basis: 16.666667%; } .MuiGrid-grid-xl-3 { flex-grow: 0; max-width: 25%; flex-basis: 25%; } .MuiGrid-grid-xl-4 { flex-grow: 0; max-width: 33.333333%; flex-basis: 33.333333%; } .MuiGrid-grid-xl-5 { flex-grow: 0; max-width: 41.666667%; flex-basis: 41.666667%; } .MuiGrid-grid-xl-6 { flex-grow: 0; max-width: 50%; flex-basis: 50%; } .MuiGrid-grid-xl-7 { flex-grow: 0; max-width: 58.333333%; flex-basis: 58.333333%; } .MuiGrid-grid-xl-8 { flex-grow: 0; max-width: 66.666667%; flex-basis: 66.666667%; } .MuiGrid-grid-xl-9 { flex-grow: 0; max-width: 75%; flex-basis: 75%; } .MuiGrid-grid-xl-10 { flex-grow: 0; max-width: 83.333333%; flex-basis: 83.333333%; } .MuiGrid-grid-xl-11 { flex-grow: 0; max-width: 91.666667%; flex-basis: 91.666667%; } .MuiGrid-grid-xl-12 { flex-grow: 0; max-width: 100%; flex-basis: 100%; } } .jss2 { color: #fff; z-index: 1300; position: relative; padding-top: 1.5rem; padding-bottom: 1.5rem; background-color: #0d224c; } @media (max-width:599.95px) { .jss3 { display: flex; flex-wrap: wrap; align-items: center; justify-content: space-between; } } @media (min-width:600px) { .jss3 { flex-shrink: 0; } } @media (max-width:599.95px) { .jss4 { margin-top: 1.5rem; flex-shrink: 0; } } @media (min-width:600px) { .jss5 { display: flex; align-items: center; justify-content: space-between; } } @media (min-width:600px) { .jss6 { margin-right: 1.5rem; } } @media (max-width:599.95px) { .jss7 { margin-top: 1.5rem; flex-shrink: 0; margin-right: 1rem; } } @media (min-width:600px) { .jss7 { margin-right: 1.5rem; } } .jss8 { margin-top: 1rem; } .jss1 { clip: rect(0 0 0 0); color: #000; width: 1px; height: 1px; display: block; overflow: hidden; position: absolute; clip-path: inset(50%); padding-top: 0.5rem; white-space: nowrap; padding-bottom: 0.5rem; text-decoration: unset; background-color: #fd6; } .jss1:focus { clip: unset; width: unset; height: unset; outline: .25rem solid transparent; overflow: unset; position: unset; clip-path: unset; white-space: unset; } .jss34 > * { box-sizing: border-box; font-family: Roboto; } .jss35 { padding-top: 1.5rem; padding-bottom: 2.5rem; } .jss36 { padding-top: 2.5rem; padding-bottom: 2.5rem; } .jss37 { padding-top: 1.5rem; padding-bottom: 2.5rem; } .jss38 { color: #fff; } .jss39 { background-color: #4c4c4c; } .jss40 { background-color: #404040; } .jss41 { background-color: #333; } .jss42 { display: inline; } .jss43:link { color: #fff; text-decoration: none; } .jss43:visited { color: #fff; } .jss43:focus { color: #000; outline: .25rem solid transparent; box-shadow: 0 .25rem 0 0 #fd6, 0 -.25rem 0 0 #fd6; text-decoration: none; background-color: #fd6; } .jss43:hover { color: #d9d9d9; transition: color .2s ease; text-decoration: underline; } .jss43:focus:hover { color: #000; outline: .25rem solid transparent; box-shadow: 0 .25rem 0 0 #fd6, 0 -.25rem 0 0 #fd6; text-decoration: none; background-color: #fd6; } .jss43:active { color: #fff; } .jss43:focus:active { color: #fff; outline: none; box-shadow: none; text-decoration: underline; background-color: transparent; } .jss44 { margin: 0; display: inline; padding: 0; list-style: none; } .jss45 { display: inline-block; font-size: .875rem; margin-top: 1rem; font-weight: 400; line-height: 1.428571428571429rem; letter-spacing: unset; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; } .jss45 b { font-weight: bolder; } .jss45 strong { font-weight: bolder; } .jss45:not(:last-child) { margin-right: 1rem; } .jss46::before { content: ">"; margin-right: 1rem; } .jss47 { width: calc(100% + 1.5rem); margin-left: -0.75rem; margin-right: -0.75rem; } .jss47 .MuiGrid-item { padding-left: 0.75rem; padding-right: 0.75rem; } @media (max-width:959.95px) { .jss47 { width: calc(100% + 1rem); margin-left: -0.5rem; margin-right: -0.5rem; } .jss47 .MuiGrid-item { padding-left: 0.5rem; padding-right: 0.5rem; } } .jss48 { padding-top: 0; padding-bottom: 0; } .jss49 { font-size: .875rem; font-weight: 400; line-height: 1.428571428571429rem; padding-top: 1rem; letter-spacing: unset; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; } .jss49 b { font-weight: bolder; } .jss49 strong { font-weight: bolder; } @media (max-width:599.95px) { .jss49 { border-top: .0625rem solid #707070; padding-top: 1.5rem; } } .jss50 { list-style: none; margin-top: 1.5rem; padding-left: 0; margin-bottom: 0; } @media (max-width:599.95px) { .jss51 { margin-top: 3rem; } } .jss52 { font-size: 1rem; font-family: "Roboto", "Helvetica", "Arial", sans-serif; font-weight: 500; line-height: 1.5rem; letter-spacing: unset; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; } @media (min-width:960px) { .jss52 { font-size: 1.25rem; line-height: 2rem; } } .jss52 b { font-weight: bolder; } .jss52 strong { font-weight: bolder; } .jss53 { font-size: .875rem; font-weight: 400; line-height: 1.428571428571429rem; letter-spacing: unset; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; } .jss53 b { font-weight: bolder; } .jss53 strong { font-weight: bolder; } .jss53:not(:first-child) { margin-top: 1rem; } .jss54 { margin-right: 0.5rem; } .jss55 { display: flex; flex-wrap: wrap; list-style: none; margin-top: 0; padding-left: 0; margin-bottom: 0; } .jss56 { margin-bottom: 0; } @media (max-width:599.95px) { .jss56 { margin-bottom: 1.5rem; } } .jss57 { font-size: .875rem; margin-top: 1rem; font-weight: 400; line-height: 1.428571428571429rem; letter-spacing: unset; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; } .jss57 b { font-weight: bolder; } .jss57 strong { font-weight: bolder; } .jss57:not(:last-child) { margin-right: 1.5rem; } .jss58 { font-size: .875rem; font-weight: 400; line-height: 1.428571428571429rem; padding-top: 1.5rem; letter-spacing: unset; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; } .jss58 b { font-weight: bolder; } .jss58 strong { font-weight: bolder; } @media (max-width:599.95px) { .jss58 { border-top: .0625rem solid #707070; } } .jss59:link { color: #fff; text-decoration: underline; } .jss59:visited { color: #d9d9d9; } .jss59:focus { color: #000; outline: .25rem solid transparent; box-shadow: 0 .25rem 0 0 #fd6, 0 -.25rem 0 0 #fd6; text-decoration: none; background-color: #fd6; } .jss59:hover { color: #d9d9d9; transition: color .2s ease; text-decoration: underline; } .jss59:focus:hover { color: #000; outline: .25rem solid transparent; box-shadow: 0 .25rem 0 0 #fd6, 0 -.25rem 0 0 #fd6; text-decoration: none; background-color: #fd6; } .jss59:active { color: #fff; } .jss59:focus:active { color: #fff; outline: none; box-shadow: none; text-decoration: underline; background-color: transparent; } .jss23 { display: none; align-items: center; margin-left: auto; justify-content: center; } @media (max-width: 757px) { .jss23 { gap: 8px; display: flex; } } @media (min-width:600px) { .jss23 { margin-top: 0.5rem; } } .jss24 { color: #069; width: 36px; border: none; height: 36px; justify-content: center; background-color: #e4e9ec; } .jss24:hover { color: #fff; cursor: pointer; background-color: #069; } .jss24:focus { color: #fff; outline: .25rem solid #fd6; outline-offset: -2px; background-color: #069; } .jss25 { display: flex; position: relative; align-items: center; margin-left: auto; } @media (max-width: 757px) { .jss25 { top: 100%; right: 0; display: none; padding: 1.8rem; position: absolute; border-top: 1px solid #ccc; box-shadow: 0px 5px 4px rgb(0 0 0 / 20%); -moz-box-shadow: 0px 5px 4px rgba(0,0,0,0.2); background-color: #fff; -webkit-box-shadow: 0px 5px 4px rgb(0 0 0 / 20%); } } @media (max-width: 400px) { .jss25 { left: 0; } } @media (max-width: 757px) { .jss25.visible { display: block; } } .jss26 { color: #666; display: block; font-size: 18px; text-decoration: unset; } .jss26:hover { color: #004777; text-decoration: underline; } .jss26:focus { color: #000; outline: transparent solid 0.25rem; box-shadow: rgb(255 221 102) 0px 0.25rem 0px 0px, rgb(255 221 102) 0px -0.25rem 0px 0px; text-decoration: none; background-color: rgb(255, 221, 102); } .jss27 { top: 100%; right: 0; width: 600px; display: none; padding: 20px 30px; position: absolute; border-top: 2px solid #00557f; box-shadow: 0px 5px 4px rgb(0 0 0 / 20%); text-align: center; -moz-box-shadow: 0px 5px 4px rgba(0,0,0,0.2); background-color: #fff; -webkit-box-shadow: 0px 5px 4px rgb(0 0 0 / 20%); } @media (max-width: 757px) { .jss27 { display: none; } } .jss28 { top: 50%; color: #2c3841; right: 1.8rem; width: 32px; border: none; bottom: 0; cursor: pointer; height: 32px; display: flex; position: absolute; transform: translateY(-50%); align-items: center; justify-content: center; background-color: transparent; } @media (min-width: 757px) { .jss28 { right: 10px; } } .jss28:hover { opacity: 0.5; } .jss28:focus { outline: .25rem solid #fd6; background-color: #fff; } @media (max-width: 757px) { .jss29 { width: 100%; } } @media (min-width: 757px) { .jss29:focus-within #predictive-results.visible { display: block; } } @media (min-width: 757px) { .jss30 { padding: 10px 10px; position: relative; margin-right: -10px; } .jss30.has-search-term:focus-within { box-shadow: 0 0 2px rgb(0 0 0 / 20%); -moz-box-shadow: 0 0 2px rgba(0,0,0,0.2); background-image: linear-gradient(to bottom,#e4e9ec 0%,#fff 100%); -webkit-box-shadow: 0 0 2px rgb(0 0 0 / 20%); } } .jss31 { width: 210px; border: 2px solid #E4E9EC; display: block; padding: 5px 32px 4px 9px; min-height: 31px; background-color: #fff; } .jss31:focus { outline: .25rem solid #fd6; background-color: #fff; } .jss31::-webkit-search-cancel-button, .jss31::-webkit-search-decoration, .jss31 -webkit-search-results-button, .jss31 -webkit-search-results-decoration { display: none; } .jss31::-ms-clear { width: 0; height: 0; display: none; } .jss31::-ms-reveal { width: 0; height: 0; display: none; } .jss31:-webkit-autofill, .jss31:-webkit-autofill:hover, .jss31:-webkit-autofill:active, .jss31:-webkit-autofill:focus { -webkit-box-shadow: 0 0 0px 1000px #fff inset; } @media (max-width: 757px) { .jss31 { width: 100%; } } .jss32 span { clip: rect(0 0 0 0); width: 1px; height: 1px; overflow: hidden; position: absolute; clip-path: inset(50%); white-space: nowrap; } .jss9 { z-index: 1100; position: relative; } .jss10 { color: #666; background-color: #fff; } @media (min-width:600px) { .jss10 { padding-top: 0.5rem; padding-bottom: 0.5rem; } } @media (max-width:599.95px) { .jss11::before { content: ''; display: table; } .jss11::after { clear: both; content: ''; display: table; } } @media (min-width:600px) { .jss11 { display: flex; justify-content: space-between; } } @media (max-width:599.95px) { .jss12 { float: left; } } .jss13 { display: flex; } .jss14 { line-height: 0; } .jss15 { margin-left: 16px; } @media (max-width:599.95px) { .jss15 { margin-top: 1rem; } } @media (min-width:600px) { .jss15 { margin-top: .625rem; } } @media (max-width:599.95px) { .jss16 { font-size: 1rem; font-family: "Roboto", "Helvetica", "Arial", sans-serif; font-weight: 400; line-height: 1.5rem; letter-spacing: unset; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; } .jss16 b { font-weight: bolder; } .jss16 strong { font-weight: bolder; } } @media (min-width:600px) { .jss16 { font-size: 1.25rem; font-family: "Roboto", "Helvetica", "Arial", sans-serif; font-weight: 400; line-height: 2rem; letter-spacing: unset; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; } .jss16 b { font-weight: bolder; } .jss16 strong { font-weight: bolder; } } .jss17 { margin-right: 3px; } @media (max-width:599.95px) { .jss18 { display: none; } } @media (min-width:600px) { .jss18 { font-size: 1.25rem; font-family: "Roboto", "Helvetica", "Arial", sans-serif; font-weight: 400; line-height: 2rem; margin-left: 3px; letter-spacing: unset; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; } .jss18 b { font-weight: bolder; } .jss18 strong { font-weight: bolder; } } .jss19:link { color: #666; text-decoration: unset; } .jss19:visited { color: #666; } .jss19:focus { color: #000; outline: .25rem solid transparent; box-shadow: 0 .25rem 0 0 #fd6, 0 -.25rem 0 0 #fd6; text-decoration: none; background-color: #fd6; } .jss19:focus:not(:focus-visible) { outline: .25rem solid transparent; box-shadow: unset; text-decoration: underline; background-color: unset; } .jss19:hover { color: #004777; text-decoration: underline; } .jss19:active { color: #000; text-decoration: underline; } @media (hover: none) { .jss19:hover { color: #666; } } @media (max-width:599.95px) { .jss20 { width: 2.5rem; height: 2.5rem; } } @media (min-width:600px) { .jss20 { width: 3.25rem; height: 3.25rem; } } .jss21 { display: inline-block; } @media (max-width:599.95px) { .jss21 { margin-top: 0.5rem; margin-bottom: 0.5rem; } } .jss21:focus { outline: .25rem solid #fd6; } .jss21:focus:not(:focus-visible) { outline: none; } .jss21:hover { opacity: 0.7; } .jss21:active { opacity: 1; } @media (hover: none) { .jss21:hover { opacity: 1; } } .jss22 { margin-left: 8px; } @media (max-width:599.95px) { .jss22 { float: right; margin-top: .625rem; margin-bottom: 0.5rem; } }</style><style data-href="https://fonts.googleapis.com/css2?family=Roboto:ital,wght@0,300;0,400;0,500;0,700;0,900;1,300;1,400;1,500&amp;display=swap">@font-face{font-family:'Roboto';font-style:italic;font-weight:300;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjARc-.woff) format('woff')}@font-face{font-family:'Roboto';font-style:italic;font-weight:400;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu52xM.woff) format('woff')}@font-face{font-family:'Roboto';font-style:italic;font-weight:500;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ABc-.woff) format('woff')}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5vAA.woff) format('woff')}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Me5g.woff) format('woff')}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9vAA.woff) format('woff')}@font-face{font-family:'Roboto';font-style:normal;font-weight:700;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlvAA.woff) format('woff')}@font-face{font-family:'Roboto';font-style:normal;font-weight:900;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtvAA.woff) format('woff')}@font-face{font-family:'Roboto';font-style:italic;font-weight:300;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc3CsTYl4BOQ3o.woff2) format('woff2');unicode-range:U+0460-052F,U+1C80-1C88,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F}@font-face{font-family:'Roboto';font-style:italic;font-weight:300;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc-CsTYl4BOQ3o.woff2) format('woff2');unicode-range:U+0301,U+0400-045F,U+0490-0491,U+04B0-04B1,U+2116}@font-face{font-family:'Roboto';font-style:italic;font-weight:300;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc2CsTYl4BOQ3o.woff2) format('woff2');unicode-range:U+1F00-1FFF}@font-face{font-family:'Roboto';font-style:italic;font-weight:300;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc5CsTYl4BOQ3o.woff2) format('woff2');unicode-range:U+0370-0377,U+037A-037F,U+0384-038A,U+038C,U+038E-03A1,U+03A3-03FF}@font-face{font-family:'Roboto';font-style:italic;font-weight:300;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc1CsTYl4BOQ3o.woff2) format('woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB}@font-face{font-family:'Roboto';font-style:italic;font-weight:300;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc0CsTYl4BOQ3o.woff2) format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:'Roboto';font-style:italic;font-weight:300;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc6CsTYl4BO.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:'Roboto';font-style:italic;font-weight:400;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xFIzIXKMnyrYk.woff2) format('woff2');unicode-range:U+0460-052F,U+1C80-1C88,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F}@font-face{font-family:'Roboto';font-style:italic;font-weight:400;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xMIzIXKMnyrYk.woff2) format('woff2');unicode-range:U+0301,U+0400-045F,U+0490-0491,U+04B0-04B1,U+2116}@font-face{font-family:'Roboto';font-style:italic;font-weight:400;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xEIzIXKMnyrYk.woff2) format('woff2');unicode-range:U+1F00-1FFF}@font-face{font-family:'Roboto';font-style:italic;font-weight:400;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xLIzIXKMnyrYk.woff2) format('woff2');unicode-range:U+0370-0377,U+037A-037F,U+0384-038A,U+038C,U+038E-03A1,U+03A3-03FF}@font-face{font-family:'Roboto';font-style:italic;font-weight:400;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xHIzIXKMnyrYk.woff2) format('woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB}@font-face{font-family:'Roboto';font-style:italic;font-weight:400;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xGIzIXKMnyrYk.woff2) format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:'Roboto';font-style:italic;font-weight:400;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzIXKMny.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:'Roboto';font-style:italic;font-weight:500;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc3CsTYl4BOQ3o.woff2) format('woff2');unicode-range:U+0460-052F,U+1C80-1C88,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F}@font-face{font-family:'Roboto';font-style:italic;font-weight:500;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc-CsTYl4BOQ3o.woff2) format('woff2');unicode-range:U+0301,U+0400-045F,U+0490-0491,U+04B0-04B1,U+2116}@font-face{font-family:'Roboto';font-style:italic;font-weight:500;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc2CsTYl4BOQ3o.woff2) format('woff2');unicode-range:U+1F00-1FFF}@font-face{font-family:'Roboto';font-style:italic;font-weight:500;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc5CsTYl4BOQ3o.woff2) format('woff2');unicode-range:U+0370-0377,U+037A-037F,U+0384-038A,U+038C,U+038E-03A1,U+03A3-03FF}@font-face{font-family:'Roboto';font-style:italic;font-weight:500;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc1CsTYl4BOQ3o.woff2) format('woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB}@font-face{font-family:'Roboto';font-style:italic;font-weight:500;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc0CsTYl4BOQ3o.woff2) format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:'Roboto';font-style:italic;font-weight:500;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc6CsTYl4BO.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4AMP6lbBP.woff2) format('woff2');unicode-range:U+0460-052F,U+1C80-1C88,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4AMP6lbBP.woff2) format('woff2');unicode-range:U+0301,U+0400-045F,U+0490-0491,U+04B0-04B1,U+2116}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4AMP6lbBP.woff2) format('woff2');unicode-range:U+1F00-1FFF}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4AMP6lbBP.woff2) format('woff2');unicode-range:U+0370-0377,U+037A-037F,U+0384-038A,U+038C,U+038E-03A1,U+03A3-03FF}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4AMP6lbBP.woff2) format('woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4AMP6lbBP.woff2) format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4AMP6lQ.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKKTU1Kvnz.woff2) format('woff2');unicode-range:U+0460-052F,U+1C80-1C88,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKKTU1Kvnz.woff2) format('woff2');unicode-range:U+0301,U+0400-045F,U+0490-0491,U+04B0-04B1,U+2116}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKKTU1Kvnz.woff2) format('woff2');unicode-range:U+1F00-1FFF}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKKTU1Kvnz.woff2) format('woff2');unicode-range:U+0370-0377,U+037A-037F,U+0384-038A,U+038C,U+038E-03A1,U+03A3-03FF}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKKTU1Kvnz.woff2) format('woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKKTU1Kvnz.woff2) format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4AMP6lbBP.woff2) format('woff2');unicode-range:U+0460-052F,U+1C80-1C88,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4AMP6lbBP.woff2) format('woff2');unicode-range:U+0301,U+0400-045F,U+0490-0491,U+04B0-04B1,U+2116}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4AMP6lbBP.woff2) format('woff2');unicode-range:U+1F00-1FFF}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4AMP6lbBP.woff2) format('woff2');unicode-range:U+0370-0377,U+037A-037F,U+0384-038A,U+038C,U+038E-03A1,U+03A3-03FF}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4AMP6lbBP.woff2) format('woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4AMP6lbBP.woff2) format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:'Roboto';font-style:normal;font-weight:700;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4AMP6lbBP.woff2) format('woff2');unicode-range:U+0460-052F,U+1C80-1C88,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F}@font-face{font-family:'Roboto';font-style:normal;font-weight:700;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4AMP6lbBP.woff2) format('woff2');unicode-range:U+0301,U+0400-045F,U+0490-0491,U+04B0-04B1,U+2116}@font-face{font-family:'Roboto';font-style:normal;font-weight:700;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4AMP6lbBP.woff2) format('woff2');unicode-range:U+1F00-1FFF}@font-face{font-family:'Roboto';font-style:normal;font-weight:700;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4AMP6lbBP.woff2) format('woff2');unicode-range:U+0370-0377,U+037A-037F,U+0384-038A,U+038C,U+038E-03A1,U+03A3-03FF}@font-face{font-family:'Roboto';font-style:normal;font-weight:700;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4AMP6lbBP.woff2) format('woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB}@font-face{font-family:'Roboto';font-style:normal;font-weight:700;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4AMP6lbBP.woff2) format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:'Roboto';font-style:normal;font-weight:700;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:'Roboto';font-style:normal;font-weight:900;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCRc4AMP6lbBP.woff2) format('woff2');unicode-range:U+0460-052F,U+1C80-1C88,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F}@font-face{font-family:'Roboto';font-style:normal;font-weight:900;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfABc4AMP6lbBP.woff2) format('woff2');unicode-range:U+0301,U+0400-045F,U+0490-0491,U+04B0-04B1,U+2116}@font-face{font-family:'Roboto';font-style:normal;font-weight:900;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCBc4AMP6lbBP.woff2) format('woff2');unicode-range:U+1F00-1FFF}@font-face{font-family:'Roboto';font-style:normal;font-weight:900;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBxc4AMP6lbBP.woff2) format('woff2');unicode-range:U+0370-0377,U+037A-037F,U+0384-038A,U+038C,U+038E-03A1,U+03A3-03FF}@font-face{font-family:'Roboto';font-style:normal;font-weight:900;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCxc4AMP6lbBP.woff2) format('woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB}@font-face{font-family:'Roboto';font-style:normal;font-weight:900;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfChc4AMP6lbBP.woff2) format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:'Roboto';font-style:normal;font-weight:900;font-display:swap;src:url(http://web.archive.org/web/20240415215647im_/https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4AMP6lQ.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}</style></head><body style="margin:0"><div id="__next"><nav aria-labelledby="main-content-skip-link"><a class="MuiTypography-root jss1 MuiTypography-subtitle2" href="#main-content" id="main-content-skip-link"><div class="MuiContainer-root">Skip to main content</div></a></nav><header class="MuiPaper-root jss9 MuiPaper-elevation3" aria-label="Site header"><div class="jss10"><div class="MuiContainer-root MuiContainer-maxWidthLg"><div class="jss11"><div><nav aria-label="Partial breadcrumb" class="jss12"><span class="jss13" role="list"><span class="jss14" role="listitem"><a aria-label="Jisc homepage" class="jss21" title="Jisc homepage" href="/web/20240415215647/https://www.jisc.ac.uk/"><img alt="Jisc" width="40" height="40" decoding="async" data-nimg="1" class="jss20" style="color:transparent" src="data:image/svg+xml;base64,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"/></a></span><span class="jss15"><span class="jss16" role="listitem"><a class="jss19" href="/web/20240415215647/https://www.jisc.ac.uk/guides">Guides</a></span><span class="jss18" role="listitem"><span aria-hidden="true" class="jss17"> <!-- -->&gt;<!-- --> </span><a class="jss19" href="/web/20240415215647/https://www.jisc.ac.uk/guides/maintaining-access-to-internal-services-during-a-continuity-event">Maintaining access to internal services during a continuity event</a></span></span></span></nav></div><div class="jss22"><div class="jss23"><button aria-controls="search-form" aria-expanded="false" aria-label="Show search box" class="jss24" title="Show search box" type="button"><svg aria-hidden="true" focusable="false" data-prefix="fas" data-icon="magnifying-glass" class="svg-inline--fa fa-magnifying-glass " role="img" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 512 512"><path fill="currentColor" d="M416 208c0 45.9-14.9 88.3-40 122.7L502.6 457.4c12.5 12.5 12.5 32.8 0 45.3s-32.8 12.5-45.3 0L330.7 376c-34.4 25.2-76.8 40-122.7 40C93.1 416 0 322.9 0 208S93.1 0 208 0S416 93.1 416 208zM208 352a144 144 0 1 0 0-288 144 144 0 1 0 0 288z"></path></svg></button></div><div class="jss25" id="search-form"><div class="jss30"><form action="/web/20240415215647/https://www.jisc.ac.uk/search" class="jss29" method="get"><label class="jss32" for="search-term"><span>Search Jisc</span><input class="jss31" id="search-term" name="q" placeholder="Search Jisc" title="Search Jisc" type="search"/></label><button aria-label="Search" class="jss28" title="Search" type="submit"><svg aria-hidden="true" focusable="false" data-prefix="fas" data-icon="magnifying-glass" class="svg-inline--fa fa-magnifying-glass " role="img" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 512 512"><path fill="currentColor" d="M416 208c0 45.9-14.9 88.3-40 122.7L502.6 457.4c12.5 12.5 12.5 32.8 0 45.3s-32.8 12.5-45.3 0L330.7 376c-34.4 25.2-76.8 40-122.7 40C93.1 416 0 322.9 0 208S93.1 0 208 0S416 93.1 416 208zM208 352a144 144 0 1 0 0-288 144 144 0 1 0 0 288z"></path></svg></button></form></div></div></div></div></div></div></header><main id="main-content"><article><header aria-labelledby="guidePageHeaderTitle" class="text-jiscMineShaft bg-jiscWhite" data-testid="guide-page-header"><div class="border-0 border-t-2 border-solid border-jiscHibiscus"></div><div class="box-border block max-w-screen-md px-4 mx-auto md:px-6" data-testclass="container"><span class="null inline-block px-3 py-1 font-sans text-[1rem] font-normal antialiased leading-[1.5rem] text-jiscWhite bg-jiscHibiscus">Quick guide</span><div class="box-border flex flex-wrap w-[calc(100%+1rem)] -mx-2 md:w-[calc(100%+1.5rem)] md:-mx-3 " data-testclass="grid"><div class="box-border block w-full px-2 sm:w-10/12 sm:ml-[calc(1/12*100%)] md:px-3 " data-testclass="grid-item"><div><h1 class="my-6 font-sans text-[2.5rem] font-normal antialiased leading-[3.5rem] sm:text-[2.75rem] md:text-[3rem] md:leading-[4rem]" id="guidePageHeaderTitle">Maintaining access to internal services during a continuity event</h1></div><p class="my-4 font-sans text-[1rem] font-normal antialiased ">Last updated: <time datetime="2020-04-24T01:00:00Z">24 April 2020</time></p><p class="mt-6 mb-[unset] font-sans text-[1.25rem] font-light antialiased leading-[2rem] sm:w-1/2 sm:min-w-full sm:mt-[unset]">How to make sure your remote users can access services during business continuity events.</p></div></div></div></header><div class=" clearfix pt-10 pb-10 bg-jiscWhite " data-testid="content-area"><div class="box-border block max-w-screen-md px-4 mx-auto md:px-6" data-testclass="container"><div class="sm:box-border sm:flex sm:w-[calc(100%+1rem)] sm:-mx-2"><div class="hidden sm:box-border sm:px-2 sm:block sm:w-1/12" data-testid="replace-material-ui-hidden--1/12@sm"></div><div class="sm:box-border sm:px-2 sm:w-10/12"><div class=" clearfix | prose | antialiased | font-sans | max-w-full | prose-h2:text-[2rem] prose-h2:font-normal prose-h2:leading-[3.0rem] prose-h2:sm:text-[2.25rem] prose-h2:md:text-[2.5rem] prose-h2:md:leading-[3.5rem] | prose-h2:mt-10 prose-h2:mb-6 first:prose-h2:mt-0 last:prose-h2:mb-0 prose-h3:text-[1.5rem] prose-h3:font-medium prose-h3:leading-[2rem] first:prose-h3:mt-0 last:prose-h3:mb-0 prose-h3:mt-10 prose-h3:mb-6 prose-h3:sm:text-[1.75rem] prose-h3:sm:leading-[2.5rem] prose-h3:md:text-[2rem] prose-h3:md:leading-[3rem] | prose-h4:text-[1.25rem] prose-h4:font-normal prose-h4:leading-[2rem] first:prose-h4:mt-0 last:prose-h4:mb-0 prose-h4:mt-10 prose-h4:mb-6 prose-h4:md:text-[1.5rem] prose-h4:md:leading-[2rem] | prose-h5:text-[1rem] prose-h5:font-medium prose-h5:leading-[1.5rem] prose-h5:mt-10 prose-h5:mb-6 first:prose-h5:mt-[unset] last:prose-h5:mb-[unset] prose-h5:md:text-[1.25rem] prose-h5:md:leading-[2rem] prose-h6:text-[1rem] prose-h6:font-semibold prose-h6:leading-[1.5rem] prose-h6:mt-10 prose-h6:mb-6 first:prose-h6:mt-[unset] last:prose-h6:mb-[unset] prose-p:my-6 prose-p:text-[1rem] prose-p:font-normal prose-p:leading-[1.5rem] first:prose-p:mt-[unset] last:prose-p:mb-[unset] empty:first:prose-p:-mt-6 prose-blockquote:my-[unset] prose-blockquote:ml-6 prose-blockquote:text-[1rem] prose-blockquote:not-italic prose-blockquote:font-normal prose-blockquote:leading-[1.5rem] prose-blockquote:border-solid prose-blockquote:border-0 prose-blockquote:border-l-[.0625rem] prose-p:prose-blockquote:py-3 before:prose-p:prose-blockquote:content-[unset] after:prose-p:prose-blockquote:content-[unset] prose-li:text-[1rem] prose-li:font-normal prose-li:leading-[1.5rem] | first:prose-li:mt-2 prose-li:pl-2 | first:prose-ol:mt-0 last:prose-ol:mb-0 prose-ol:my-6 prose-ol:pl-8 prose-ol:leading-[1.5rem] | first:prose-ul:mt-0 last:prose-ul:mb-0 prose-ul:my-6 prose-ul:pl-8 prose-ul:leading-[1.5rem] | prose-table:leading-[1.5rem] | prose-table:mt-[unset] prose-table:mb-[unset] | prose-table:border-collapse | prose-p:prose-td:text-[0.875rem] | prose-p:prose-th:text-[0.875rem] | prose-li:prose-th:text-[0.875rem] | prose-li:prose-td:text-[0.875rem] | prose-td:border-solid prose-td:border-l-[0rem] prose-td:border-r-[0rem] prose-td:border-jiscAlto | prose-td:border-b-[0.0625rem] prose-td:border-t-[0.0625rem] | prose-td:p-4 prose-td:align-middle prose-td:leading-[1.5rem]| prose-th:border-solid prose-th:border-l-[0rem] prose-th:border-r-[0rem] prose-th:border-jiscAlto | prose-th:border-b-[0.0625rem] prose-th:border-t-[0.0625rem] prose-th:border-b-jiscAlto prose-th:border-t-jiscAlto | prose-th:p-4 prose-th:align-middle prose-th:leading-[1.5rem] | prose-th:font-medium | prose-tr:border-b-jiscAlto prose-tr:border-t-jiscAlto | prose-img:block prose-img:max-w-full prose-img:h-auto prose-img:my-6 prose-img:leading-none | prose-a:font-normal prose-a:text-jiscBahamaBlue prose-a:underline | visited:prose-a:text-jiscPurple | focus:prose-a:text-jiscBlack focus:prose-a:bg-jiscDandelion focus:prose-a:outline focus:prose-a:outline-4 focus:prose-a:outline-transparent focus:prose-a:no-underline focus:prose-a:shadow-[0_.25rem_0_0_#fd6,_0_-.25rem_0_0_#fd6] | hover:prose-a:text-jiscRegalBlue | active:prose-a:text-jiscBlack | focus:active:prose-a:underline focus:active:prose-a:bg-transparent focus:active:prose-a:shadow-none | prose-strong:prose-a:text-jiscBahamaBlue | prose-strong:visited:prose-a:text-jiscPurple | prose-strong:focus:prose-a:text-jiscBlack | prose-strong:hover:prose-a:text-jiscRegalBlue | prose-strong:active:prose-a:text-jiscBlack || prose-blockquote:border-l-jiscAlto || marker:text-jiscMineShaft | prose-blockquote:text-jiscDoveGrey | prose-headings:text-jiscMineShaft | prose-li:text-jiscMineShaft | prose-ol:text-jiscMineShaft | prose-p:text-jiscMineShaft | prose-strong:text-jiscMineShaft | prose-table:text-jiscMineShaft | prose-ul:text-jiscMineShaft | | |"><p data-block-key="mh42p">Business continuity events place pressure on service providers. Some organisations struggle to keep services accessible to remote users during these times.</p><p data-block-key="4gect">Aside from scaling an existing virtual private network (VPN), or buying a new service for rapid deployment, here are some options that could relieve the pressure on these services in other ways:</p><h2 id="change-user-behaviour-e0fu2" data-block-key="e0fu2">Change user behaviour</h2><p data-block-key="ao4ok">Changing how users access systems is a powerful way to ensure resources are used as efficiently as possible, without the need for configuration changes or additional licenses.</p><ul><li data-block-key="5rpj8">Small changes to timetables can spread out some of the load</li><li data-block-key="4ev3v">Encouraging flexible working hours can help to flatten spikes in demand</li></ul><h2 id="make-effective-use-of-current-vpn-resources-5n1bi" data-block-key="5n1bi">Make effective use of current VPN resources</h2><p data-block-key="c4t8v">The two limits organisations are most likely to hit are concurrent sessions and throughput, so it&#x27;s important that each user takes up a <strong>minimal amount of resource</strong> for a <strong>minimal amount of time</strong>.</p><h3 data-block-key="3h0ab">Ensure there are no idle users</h3><p data-block-key="b8v6k">Although it&#x27;s nice for a user to return to their workstation after a four-hour break and find they&#x27;re still connected, with a fixed number of seats they will have unnecessarily been occupying a licence that whole time.</p><p data-block-key="55v1n">Make sure that your VPN service has appropriate <strong>session length</strong> and <strong>idle timers</strong> set to ensure that idle resources are freed up.</p><h3 data-block-key="8gvio">Speak with vendors</h3><p data-block-key="4cepf">Some may offer additional seats at reduced cost during times of crisis and can advise on how to drive maximum performance out of their products.</p><h3 data-block-key="6tvn5">Conserve bandwidth</h3><p data-block-key="roq">Switch full tunnel VPN&#x27;s to <a href="http://web.archive.org/web/20240415215647/https://en.wikipedia.org/wiki/Split_tunneling">split tunnelling</a> if possible (and if there are no constraints around traffic inspection). Only advertise internal subnets so that traffic can be offloaded at the user’s workstation.</p><p data-block-key="1u92c">If split tunnelling is not possible, look at inserting <a href="http://web.archive.org/web/20240415215647/https://openvpn.net/community-resources/reference-manual-for-openvpn-2-4/">net_gateway routes</a>, or configuring <a href="http://web.archive.org/web/20240415215647/https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/70847-local-lan-pix-asa.html#anc6">Local LAN Access</a> for high bandwidth services such as Netflix, iPlayer and YouTube.</p><p data-block-key="2fq0k">Most large service providers publish their IP ranges, including <a href="http://web.archive.org/web/20240415215647/https://docs.microsoft.com/en-us/office365/enterprise/urls-and-ip-address-ranges">Microsoft</a> and <a href="http://web.archive.org/web/20240415215647/https://support.zoom.us/hc/en-us/articles/201362683-Network-Firewall-or-Proxy-Server-Settings-for-Zoom">Zoom</a>. By loading these into the VPN server as routes to break out at the client, it’s possible to dramatically reduce the bandwidth each user consumes.</p><h2 id="allow-access-to-internal-services-without-a-vpn-55ijg" data-block-key="55ijg">Allow access to internal services without a VPN</h2><p data-block-key="dd571">By opening up services to direct access where appropriate, the number of users that need to access a VPN at any given moment can be reduced.</p><p data-block-key="brva5">This doesn’t have to be an ‘all or nothing’ approach. An effective application layer firewall allows individual urls to be filtered. VPN access would be required for admin console access and privileged tasks, but regular users could be permitted access without. Network address translation (NAT) can make this difficult, or impossible, but there are other ways to securely deliver services behind an IPv4 NAT without the use of a VPN.</p><h3 data-block-key="160s1">What about security?</h3><p data-block-key="2d1sl">Although VPNs are an easy way to add encryption and authentication to services, many modern applications operate over some form of built-in strong encryption and now support strong authentication mechanisms out of the box (SAML, OIDC, OAUTH, Kerberos, LDAP) enhanced with multi-factor access.</p><ul><li data-block-key="cunf9">Jisc offers a <a href="http://web.archive.org/web/20240415215647/https://www.jisc.ac.uk/critical-services-protection">critical services protection service</a> that can help mitigate potential attacks</li><li data-block-key="efk4q">Major cloud providers such as Cloudflare, Microsoft, Amazon and Google offer products that can act as drop-in solutions</li></ul><h2 id="explore-alternative-service-designs-49cf4" data-block-key="49cf4">Explore alternative service designs</h2><p data-block-key="54vsr">If your services are delivered over HTTP, investigate the use of a <strong>reverse proxy</strong> or <strong>load balancer</strong>. This can add strong encryption, strong authentication, and isolation from the internet without the use of a VPN.</p><p data-block-key="594d2">There are a large selection of:</p><ul><li data-block-key="9tltd">Open source reverse proxies (Apache, NGinx, Pound, Varnish, HAProxy, Træfɪk, Caddy, Squid)</li><li data-block-key="b8ahi">Products from major cloud vendors(Cloudflare, Microsoft, Amazon and Google)</li><li data-block-key="1k9t4">Physical and virtual appliances (F5, A10, Citrix)</li></ul><p data-block-key="du3r4">Some options go a step further and enable the build out of a <a href="http://web.archive.org/web/20240415215647/https://www.cloudflare.com/learning/security/glossary/what-is-zero-trust/">zero trust security model</a> with ease.</p><p data-block-key="5v2kd">Switching over to this kind of design is application-dependent, but can allow access to systems to scale better.</p><p data-block-key="eidoi">This doesn&#x27;t have to be an &#x27;all or nothing&#x27; approach. It’s possible to start from a single service and have it delivered both via VPN and via reverse proxy simultaneously.</p><h2 id="migrate-services-to-the-cloud-ai8si" data-block-key="ai8si">Migrate services to the cloud</h2><p data-block-key="7nf6c">A common reason for deploying a VPN is to access services that are based on private addressing. A quicker way to make these accessible is to migrate these to a public cloud.</p><p data-block-key="bibmi">The difficulty of migration is dependent on the application itself, but once they&#x27;re in the cloud there are additional options for making them accessible, including:</p><ul><li data-block-key="5s6gt">Network virtual appliances (to provide dial-in VPN services)</li><li data-block-key="eg490">Built-in load balancing</li><li data-block-key="efl9q">Reverse proxying capabilities</li></ul><h2 id="deploy-ipv6-b8bh3" data-block-key="b8bh3">Deploy IPv6</h2><p data-block-key="aplgn">As a longer-term activity, IPv6 provides sufficient addressing so that any site can offer end-to-end connectivity for all users and services.</p><p data-block-key="2i2ek">For sites with a limited pool of available IPv4 addresses, this would allow the delivery of on-premise services without the use of a VPN to some users during continuity events.</p></div><div class="p-10 my-10 font-sans text-sm antialiased font-normal bg-jiscConcrete text-jiscMineShaft">This guide is made available under <a href="http://web.archive.org/web/20240415215647/https://creativecommons.org/licenses/by-nc-nd/4.0/">Creative Commons License (CC BY-NC-ND).</a></div></div></div></div></div></article></main><footer aria-labelledby="site-footer" class="jss34"><div class="jss38 jss35 jss39"><div class="MuiContainer-root MuiContainer-maxWidthMd"><div class="MuiGrid-root jss47 MuiGrid-container"><div class="MuiGrid-root jss48 MuiGrid-item MuiGrid-grid-xs-12 MuiGrid-grid-sm-9"><h2 class="MuiTypography-root MuiTypography-srOnly" id="site-footer">Site footer</h2><div class=""><nav aria-label="Breadcrumb" class="jss42"><ul class="jss44"><li class="jss45"><a aria-label="Jisc homepage" class="jss43" title="Jisc homepage" href="/web/20240415215647/https://www.jisc.ac.uk/"><svg aria-hidden="true" focusable="false" data-prefix="fas" data-icon="house" class="svg-inline--fa fa-house " role="img" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 576 512"><path fill="currentColor" d="M575.8 255.5c0 18-15 32.1-32 32.1h-32l.7 160.2c0 2.7-.2 5.4-.5 8.1V472c0 22.1-17.9 40-40 40H456c-1.1 0-2.2 0-3.3-.1c-1.4 .1-2.8 .1-4.2 .1H416 392c-22.1 0-40-17.9-40-40V448 384c0-17.7-14.3-32-32-32H256c-17.7 0-32 14.3-32 32v64 24c0 22.1-17.9 40-40 40H160 128.1c-1.5 0-3-.1-4.5-.2c-1.2 .1-2.4 .2-3.6 .2H104c-22.1 0-40-17.9-40-40V360c0-.9 0-1.9 .1-2.8V287.6H32c-18 0-32-14-32-32.1c0-9 3-17 10-24L266.4 8c7-7 15-8 22-8s15 2 21 7L564.8 231.5c8 7 12 15 11 24z"></path></svg></a></li><li class="jss45"><span class="jss46"><a class="jss59" href="/web/20240415215647/https://www.jisc.ac.uk/guides">Guides</a></span></li><li aria-current="page" class="jss45"><span class="jss46">Maintaining access to internal services during a continuity event</span></li></ul></nav></div></div><div class="MuiGrid-root jss48 MuiGrid-item MuiGrid-grid-xs-12 MuiGrid-grid-sm-3"></div></div></div></div><div class="jss38 jss36 jss40"><div class="MuiContainer-root MuiContainer-maxWidthMd"><h3 class="MuiTypography-root MuiTypography-srOnly">Jisc product areas</h3><div class="MuiGrid-root jss47 MuiGrid-container"><div class="MuiGrid-root jss48 MuiGrid-item MuiGrid-grid-xs-12 MuiGrid-grid-sm-3"><h4 class="MuiTypography-root jss52 MuiTypography-body1">Areas</h4><ul class="jss50"><li class="jss53"><a class="jss59" href="/web/20240415215647/https://www.jisc.ac.uk/connectivity">Connectivity</a></li><li class="jss53"><a class="jss59" href="/web/20240415215647/https://www.jisc.ac.uk/cyber-security">Cyber security</a></li><li class="jss53"><a class="jss59" href="/web/20240415215647/https://www.jisc.ac.uk/cloud">Cloud</a></li><li class="jss53"><a class="jss59" href="/web/20240415215647/https://www.jisc.ac.uk/data-analytics">Data and analytics</a></li><li class="jss53"><a class="jss59" href="/web/20240415215647/https://www.jisc.ac.uk/libraries-learning-resources-and-research">Libraries, learning resources and research</a></li><li class="jss53"><a class="jss59" href="/web/20240415215647/https://www.jisc.ac.uk/student-experience">Student experience</a></li><li class="jss53"><a class="jss59" href="/web/20240415215647/https://www.jisc.ac.uk/trust-and-identity">Trust and identity</a></li><li class="jss53"><a class="jss59" href="/web/20240415215647/https://www.jisc.ac.uk/advice-and-guidance">Advice and guidance</a></li></ul></div><div class="MuiGrid-root jss48 MuiGrid-item MuiGrid-grid-xs-12 MuiGrid-grid-sm-3"><h4 class="MuiTypography-root jss52 jss51 MuiTypography-body1">Explore</h4><ul class="jss50"><li class="jss53"><a class="jss59" href="/web/20240415215647/https://www.jisc.ac.uk/guides">Guides</a></li><li class="jss53"><a class="jss59" href="/web/20240415215647/https://www.jisc.ac.uk/training">Training</a></li><li class="jss53"><a class="jss59" href="/web/20240415215647/https://www.jisc.ac.uk/consultancy">Consultancy</a></li><li class="jss53"><a class="jss59" href="/web/20240415215647/https://www.jisc.ac.uk/events">Events</a></li><li class="jss53"><a class="jss59" href="/web/20240415215647/https://www.jisc.ac.uk/innovation">Innovation</a></li></ul></div><div class="MuiGrid-root jss48 MuiGrid-item MuiGrid-grid-xs-12 MuiGrid-grid-sm-3"><h4 class="MuiTypography-root jss52 jss51 MuiTypography-body1">Useful</h4><ul class="jss50"><li class="jss53"><a class="jss59" href="/web/20240415215647/https://www.jisc.ac.uk/about-us">About</a></li><li class="jss53"><a class="jss59" href="/web/20240415215647/https://www.jisc.ac.uk/membership">Membership</a></li><li class="jss53"><a class="jss59" href="/web/20240415215647/https://www.jisc.ac.uk/get-involved">Get involved</a></li><li class="jss53"><a class="jss59" href="/web/20240415215647/https://www.jisc.ac.uk/news">News</a></li><li class="jss53"><a class="jss59" href="/web/20240415215647/https://www.jisc.ac.uk/jobs">Jobs</a></li></ul></div><div class="MuiGrid-root jss48 MuiGrid-item MuiGrid-grid-xs-12 MuiGrid-grid-sm-3"><h4 class="MuiTypography-root jss52 jss51 MuiTypography-body1">Get in touch</h4><ul class="jss50"><li class="jss53"><a class="jss59" href="/web/20240415215647/https://www.jisc.ac.uk/contact">Contact us</a></li><li class="jss53"><a class="jss59" href="/web/20240415215647/https://www.jisc.ac.uk/forms/headlines">Sign up to our newsletter</a></li><li class="jss53"><svg aria-hidden="true" focusable="false" data-prefix="fab" data-icon="x-twitter" class="svg-inline--fa fa-x-twitter jss54" role="img" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 512 512"><path fill="currentColor" d="M389.2 48h70.6L305.6 224.2 487 464H345L233.7 318.6 106.5 464H35.8L200.7 275.5 26.8 48H172.4L272.9 180.9 389.2 48zM364.4 421.8h39.1L151.1 88h-42L364.4 421.8z"></path></svg><a class="jss59" href="http://web.archive.org/web/20240415215647/https://twitter.com/jisc">X</a></li><li class="jss53"><svg aria-hidden="true" focusable="false" data-prefix="fab" data-icon="linkedin" class="svg-inline--fa fa-linkedin jss54" role="img" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 448 512"><path fill="currentColor" d="M416 32H31.9C14.3 32 0 46.5 0 64.3v383.4C0 465.5 14.3 480 31.9 480H416c17.6 0 32-14.5 32-32.3V64.3c0-17.8-14.4-32.3-32-32.3zM135.4 416H69V202.2h66.5V416zm-33.2-243c-21.3 0-38.5-17.3-38.5-38.5S80.9 96 102.2 96c21.2 0 38.5 17.3 38.5 38.5 0 21.3-17.2 38.5-38.5 38.5zm282.1 243h-66.4V312c0-24.8-.5-56.7-34.5-56.7-34.6 0-39.9 27-39.9 54.9V416h-66.4V202.2h63.7v29.2h.9c8.9-16.8 30.6-34.5 62.9-34.5 67.2 0 79.7 44.3 79.7 101.9V416z"></path></svg><a class="jss59" href="http://web.archive.org/web/20240415215647/https://www.linkedin.com/company/jisc">LinkedIn</a></li><li class="jss53"><svg aria-hidden="true" focusable="false" data-prefix="fab" data-icon="instagram" class="svg-inline--fa fa-instagram jss54" role="img" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 448 512"><path fill="currentColor" d="M224.1 141c-63.6 0-114.9 51.3-114.9 114.9s51.3 114.9 114.9 114.9S339 319.5 339 255.9 287.7 141 224.1 141zm0 189.6c-41.1 0-74.7-33.5-74.7-74.7s33.5-74.7 74.7-74.7 74.7 33.5 74.7 74.7-33.6 74.7-74.7 74.7zm146.4-194.3c0 14.9-12 26.8-26.8 26.8-14.9 0-26.8-12-26.8-26.8s12-26.8 26.8-26.8 26.8 12 26.8 26.8zm76.1 27.2c-1.7-35.9-9.9-67.7-36.2-93.9-26.2-26.2-58-34.4-93.9-36.2-37-2.1-147.9-2.1-184.9 0-35.8 1.7-67.6 9.9-93.9 36.1s-34.4 58-36.2 93.9c-2.1 37-2.1 147.9 0 184.9 1.7 35.9 9.9 67.7 36.2 93.9s58 34.4 93.9 36.2c37 2.1 147.9 2.1 184.9 0 35.9-1.7 67.7-9.9 93.9-36.2 26.2-26.2 34.4-58 36.2-93.9 2.1-37 2.1-147.8 0-184.8zM398.8 388c-7.8 19.6-22.9 34.7-42.6 42.6-29.5 11.7-99.5 9-132.1 9s-102.7 2.6-132.1-9c-19.6-7.8-34.7-22.9-42.6-42.6-11.7-29.5-9-99.5-9-132.1s-2.6-102.7 9-132.1c7.8-19.6 22.9-34.7 42.6-42.6 29.5-11.7 99.5-9 132.1-9s102.7-2.6 132.1 9c19.6 7.8 34.7 22.9 42.6 42.6 11.7 29.5 9 99.5 9 132.1s2.7 102.7-9 132.1z"></path></svg><a class="jss59" href="http://web.archive.org/web/20240415215647/https://www.instagram.com/jiscsocial/">Instagram</a></li><li class="jss53"><svg aria-hidden="true" focusable="false" data-prefix="fab" data-icon="facebook" class="svg-inline--fa fa-facebook jss54" role="img" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 512 512"><path fill="currentColor" d="M512 256C512 114.6 397.4 0 256 0S0 114.6 0 256C0 376 82.7 476.8 194.2 504.5V334.2H141.4V256h52.8V222.3c0-87.1 39.4-127.5 125-127.5c16.2 0 44.2 3.2 55.7 6.4V172c-6-.6-16.5-1-29.6-1c-42 0-58.2 15.9-58.2 57.2V256h83.6l-14.4 78.2H287V510.1C413.8 494.8 512 386.9 512 256h0z"></path></svg><a class="jss59" href="http://web.archive.org/web/20240415215647/https://www.facebook.com/jiscsocial">Facebook</a></li><li class="jss53"><svg aria-hidden="true" focusable="false" data-prefix="fab" data-icon="youtube" class="svg-inline--fa fa-youtube jss54" role="img" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 576 512"><path fill="currentColor" d="M549.655 124.083c-6.281-23.65-24.787-42.276-48.284-48.597C458.781 64 288 64 288 64S117.22 64 74.629 75.486c-23.497 6.322-42.003 24.947-48.284 48.597-11.412 42.867-11.412 132.305-11.412 132.305s0 89.438 11.412 132.305c6.281 23.65 24.787 41.5 48.284 47.821C117.22 448 288 448 288 448s170.78 0 213.371-11.486c23.497-6.321 42.003-24.171 48.284-47.821 11.412-42.867 11.412-132.305 11.412-132.305s0-89.438-11.412-132.305zm-317.51 213.508V175.185l142.739 81.205-142.739 81.201z"></path></svg><a class="jss59" href="http://web.archive.org/web/20240415215647/http://www.youtube.com/user/JISCmedia">YouTube</a></li></ul></div></div></div></div><div class="jss38 jss37 jss41"><div class="MuiContainer-root MuiContainer-maxWidthMd"><div class="MuiGrid-root jss47 MuiGrid-container"><div class="MuiGrid-root jss48 MuiGrid-item MuiGrid-grid-xs-12 MuiGrid-grid-sm-9"><h3 class="MuiTypography-root MuiTypography-srOnly">Site utilities</h3><ul class="jss55"><li class="jss57"><a class="jss59" href="/web/20240415215647/https://www.jisc.ac.uk/cookies">Cookies</a></li><li class="jss57"><a class="jss59" href="/web/20240415215647/https://www.jisc.ac.uk/website/privacy-notice">Privacy</a></li><li class="jss57"><a class="jss59" href="/web/20240415215647/https://www.jisc.ac.uk/about-us/modern-slavery-statement">Modern slavery</a></li><li class="jss57"><a class="jss59" href="/web/20240415215647/https://www.jisc.ac.uk/about-us/carbon-reduction-plan">Carbon reduction plan</a></li><li class="jss57"><a class="jss59" href="/web/20240415215647/https://www.jisc.ac.uk/accessibility-statement">Accessibility</a></li></ul></div></div></div></div></footer></div><script id="__NEXT_DATA__" type="application/json">{"props":{"pageProps":{"path":["guides","maintaining-access-to-internal-services-during-a-continuity-event"],"pageData":{"id":494,"meta":{"type":"base.GuidePage","detail_url":"http://web.archive.org/web/20240415215647/http://backend:8000/api/v2/pages/494/","html_url":"http://web.archive.org/web/20240415215647/https://www.jisc.ac.uk/guides/maintaining-access-to-internal-services-during-a-continuity-event/","slug":"maintaining-access-to-internal-services-during-a-continuity-event","show_in_menus":false,"seo_title":"Maintaining access to internal services during a continuity event","search_description":"How to make sure your remote users can access services during business continuity events.","first_published_at":"2020-04-24T00:00:00Z","alias_of":null,"parent":{"id":241,"meta":{"type":"base.GuideListingPage","detail_url":"http://web.archive.org/web/20240415215647/http://backend:8000/api/v2/pages/241/","html_url":"http://web.archive.org/web/20240415215647/https://www.jisc.ac.uk/guides/"},"title":"Guides"}},"title":"Maintaining access to internal services during a continuity event","categories":[{"id":2,"name":"Cloud"}],"archived":false,"archived_on_date":null,"archived_text":"","authors":[{"id":16,"meta":{"type":"base.GuideAuthorsOrderable"},"first_name":"Mark","last_name":"Tysom","job_title":"Senior product manager, core cyber services","bio_link":null,"summary":"","image":{"url":"http://web.archive.org/web/20240415215647/https://jisc-ac-uk-static-assets-prod.s3.eu-west-1.amazonaws.com/media/original_images/mark-tysom-staff-square-300x300_WgURub2.jpg","title":"Mark Tysom","id":431},"image_alt_text":null}],"breadcrumbs":[{"id":1,"name":"Root","url":null},{"id":3,"name":"Jisc","url":"/"},{"id":241,"name":"Guides","url":"/guides/"},{"id":494,"name":"Maintaining access to internal services during a continuity event","url":"/guides/maintaining-access-to-internal-services-during-a-continuity-event/"}],"copyright_banner":true,"last_published_at":"2023-05-10T16:30:37.377792Z","open_graph_image":null,"open_graph_image_alt":"","override_last_published_at":"2020-04-24T01:00:00Z","page_body":[{"type":"content_block","value":"\u003cp data-block-key=\"mh42p\"\u003eBusiness continuity events place pressure on service providers. Some organisations struggle to keep services accessible to remote users during these times.\u003c/p\u003e\u003cp data-block-key=\"4gect\"\u003eAside from scaling an existing virtual private network (VPN), or buying a new service for rapid deployment, here are some options that could relieve the pressure on these services in other ways:\u003c/p\u003e\u003ch2 id=\"change-user-behaviour-e0fu2\" data-block-key=\"e0fu2\"\u003eChange user behaviour\u003c/h2\u003e\u003cp data-block-key=\"ao4ok\"\u003eChanging how users access systems is a powerful way to ensure resources are used as efficiently as possible, without the need for configuration changes or additional licenses.\u003c/p\u003e\u003cul\u003e\u003cli data-block-key=\"5rpj8\"\u003eSmall changes to timetables can spread out some of the load\u003c/li\u003e\u003cli data-block-key=\"4ev3v\"\u003eEncouraging flexible working hours can help to flatten spikes in demand\u003c/li\u003e\u003c/ul\u003e\u003ch2 id=\"make-effective-use-of-current-vpn-resources-5n1bi\" data-block-key=\"5n1bi\"\u003eMake effective use of current VPN resources\u003c/h2\u003e\u003cp data-block-key=\"c4t8v\"\u003eThe two limits organisations are most likely to hit are concurrent sessions and throughput, so it\u0026#x27;s important that each user takes up a \u003cstrong\u003eminimal amount of resource\u003c/strong\u003e for a \u003cstrong\u003eminimal amount of time\u003c/strong\u003e.\u003c/p\u003e\u003ch3 data-block-key=\"3h0ab\"\u003eEnsure there are no idle users\u003c/h3\u003e\u003cp data-block-key=\"b8v6k\"\u003eAlthough it\u0026#x27;s nice for a user to return to their workstation after a four-hour break and find they\u0026#x27;re still connected, with a fixed number of seats they will have unnecessarily been occupying a licence that whole time.\u003c/p\u003e\u003cp data-block-key=\"55v1n\"\u003eMake sure that your VPN service has appropriate \u003cstrong\u003esession length\u003c/strong\u003e and \u003cstrong\u003eidle timers\u003c/strong\u003e set to ensure that idle resources are freed up.\u003c/p\u003e\u003ch3 data-block-key=\"8gvio\"\u003eSpeak with vendors\u003c/h3\u003e\u003cp data-block-key=\"4cepf\"\u003eSome may offer additional seats at reduced cost during times of crisis and can advise on how to drive maximum performance out of their products.\u003c/p\u003e\u003ch3 data-block-key=\"6tvn5\"\u003eConserve bandwidth\u003c/h3\u003e\u003cp data-block-key=\"roq\"\u003eSwitch full tunnel VPN\u0026#x27;s to \u003ca href=\"https://en.wikipedia.org/wiki/Split_tunneling\"\u003esplit tunnelling\u003c/a\u003e if possible (and if there are no constraints around traffic inspection). Only advertise internal subnets so that traffic can be offloaded at the user’s workstation.\u003c/p\u003e\u003cp data-block-key=\"1u92c\"\u003eIf split tunnelling is not possible, look at inserting \u003ca href=\"https://openvpn.net/community-resources/reference-manual-for-openvpn-2-4/\"\u003enet_gateway routes\u003c/a\u003e, or configuring \u003ca href=\"https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/70847-local-lan-pix-asa.html#anc6\"\u003eLocal LAN Access\u003c/a\u003e for high bandwidth services such as Netflix, iPlayer and YouTube.\u003c/p\u003e\u003cp data-block-key=\"2fq0k\"\u003eMost large service providers publish their IP ranges, including \u003ca href=\"https://docs.microsoft.com/en-us/office365/enterprise/urls-and-ip-address-ranges\"\u003eMicrosoft\u003c/a\u003e and \u003ca href=\"https://support.zoom.us/hc/en-us/articles/201362683-Network-Firewall-or-Proxy-Server-Settings-for-Zoom\"\u003eZoom\u003c/a\u003e. By loading these into the VPN server as routes to break out at the client, it’s possible to dramatically reduce the bandwidth each user consumes.\u003c/p\u003e\u003ch2 id=\"allow-access-to-internal-services-without-a-vpn-55ijg\" data-block-key=\"55ijg\"\u003eAllow access to internal services without a VPN\u003c/h2\u003e\u003cp data-block-key=\"dd571\"\u003eBy opening up services to direct access where appropriate, the number of users that need to access a VPN at any given moment can be reduced.\u003c/p\u003e\u003cp data-block-key=\"brva5\"\u003eThis doesn’t have to be an ‘all or nothing’ approach. An effective application layer firewall allows individual urls to be filtered. VPN access would be required for admin console access and privileged tasks, but regular users could be permitted access without. Network address translation (NAT) can make this difficult, or impossible, but there are other ways to securely deliver services behind an IPv4 NAT without the use of a VPN.\u003c/p\u003e\u003ch3 data-block-key=\"160s1\"\u003eWhat about security?\u003c/h3\u003e\u003cp data-block-key=\"2d1sl\"\u003eAlthough VPNs are an easy way to add encryption and authentication to services, many modern applications operate over some form of built-in strong encryption and now support strong authentication mechanisms out of the box (SAML, OIDC, OAUTH, Kerberos, LDAP) enhanced with multi-factor access.\u003c/p\u003e\u003cul\u003e\u003cli data-block-key=\"cunf9\"\u003eJisc offers a \u003ca href=\"https://www.jisc.ac.uk/critical-services-protection\"\u003ecritical services protection service\u003c/a\u003e that can help mitigate potential attacks\u003c/li\u003e\u003cli data-block-key=\"efk4q\"\u003eMajor cloud providers such as Cloudflare, Microsoft, Amazon and Google offer products that can act as drop-in solutions\u003c/li\u003e\u003c/ul\u003e\u003ch2 id=\"explore-alternative-service-designs-49cf4\" data-block-key=\"49cf4\"\u003eExplore alternative service designs\u003c/h2\u003e\u003cp data-block-key=\"54vsr\"\u003eIf your services are delivered over HTTP, investigate the use of a \u003cstrong\u003ereverse proxy\u003c/strong\u003e or \u003cstrong\u003eload balancer\u003c/strong\u003e. This can add strong encryption, strong authentication, and isolation from the internet without the use of a VPN.\u003c/p\u003e\u003cp data-block-key=\"594d2\"\u003eThere are a large selection of:\u003c/p\u003e\u003cul\u003e\u003cli data-block-key=\"9tltd\"\u003eOpen source reverse proxies (Apache, NGinx, Pound, Varnish, HAProxy, Træfɪk, Caddy, Squid)\u003c/li\u003e\u003cli data-block-key=\"b8ahi\"\u003eProducts from major cloud vendors(Cloudflare, Microsoft, Amazon and Google)\u003c/li\u003e\u003cli data-block-key=\"1k9t4\"\u003ePhysical and virtual appliances (F5, A10, Citrix)\u003c/li\u003e\u003c/ul\u003e\u003cp data-block-key=\"du3r4\"\u003eSome options go a step further and enable the build out of a \u003ca href=\"https://www.cloudflare.com/learning/security/glossary/what-is-zero-trust/\"\u003ezero trust security model\u003c/a\u003e with ease.\u003c/p\u003e\u003cp data-block-key=\"5v2kd\"\u003eSwitching over to this kind of design is application-dependent, but can allow access to systems to scale better.\u003c/p\u003e\u003cp data-block-key=\"eidoi\"\u003eThis doesn\u0026#x27;t have to be an \u0026#x27;all or nothing\u0026#x27; approach. It’s possible to start from a single service and have it delivered both via VPN and via reverse proxy simultaneously.\u003c/p\u003e\u003ch2 id=\"migrate-services-to-the-cloud-ai8si\" data-block-key=\"ai8si\"\u003eMigrate services to the cloud\u003c/h2\u003e\u003cp data-block-key=\"7nf6c\"\u003eA common reason for deploying a VPN is to access services that are based on private addressing. A quicker way to make these accessible is to migrate these to a public cloud.\u003c/p\u003e\u003cp data-block-key=\"bibmi\"\u003eThe difficulty of migration is dependent on the application itself, but once they\u0026#x27;re in the cloud there are additional options for making them accessible, including:\u003c/p\u003e\u003cul\u003e\u003cli data-block-key=\"5s6gt\"\u003eNetwork virtual appliances (to provide dial-in VPN services)\u003c/li\u003e\u003cli data-block-key=\"eg490\"\u003eBuilt-in load balancing\u003c/li\u003e\u003cli data-block-key=\"efl9q\"\u003eReverse proxying capabilities\u003c/li\u003e\u003c/ul\u003e\u003ch2 id=\"deploy-ipv6-b8bh3\" data-block-key=\"b8bh3\"\u003eDeploy IPv6\u003c/h2\u003e\u003cp data-block-key=\"aplgn\"\u003eAs a longer-term activity, IPv6 provides sufficient addressing so that any site can offer end-to-end connectivity for all users and services.\u003c/p\u003e\u003cp data-block-key=\"2i2ek\"\u003eFor sites with a limited pool of available IPv4 addresses, this would allow the delivery of on-premise services without the use of a VPN to some users during continuity events.\u003c/p\u003e","id":"e1edb89b-85c2-4b76-b435-17aaea7f83ed"}],"redirect_url":"","secondary_page_type":"quick_guide","summary":"How to make sure your remote users can access services during business continuity events.","table_of_contents":"none","topics":[{"id":16,"name":"Infrastructure and systems"},{"id":6,"name":"Security, access and identity management"}]}},"__N_SSP":true},"page":"/[...path]","query":{"path":["guides","maintaining-access-to-internal-services-during-a-continuity-event"]},"buildId":"xx_QiHckg3_1c5ZZF_g2t","isFallback":false,"isExperimentalCompile":false,"gssp":true,"scriptLoader":[]}</script></body></html><!-- FILE ARCHIVED ON 21:56:47 Apr 15, 2024 AND RETRIEVED FROM THE INTERNET ARCHIVE ON 18:56:07 Nov 28, 2024. JAVASCRIPT APPENDED BY WAYBACK MACHINE, COPYRIGHT INTERNET ARCHIVE. ALL OTHER CONTENT MAY ALSO BE PROTECTED BY COPYRIGHT (17 U.S.C. SECTION 108(a)(3)). --> <!-- playback timings (ms): captures_list: 0.573 exclusion.robots: 0.027 exclusion.robots.policy: 0.018 esindex: 0.009 cdx.remote: 21.366 LoadShardBlock: 400.452 (3) PetaboxLoader3.datanode: 210.192 (4) PetaboxLoader3.resolve: 260.184 (2) load_resource: 231.42 -->

Pages: 1 2 3 4 5 6 7 8 9 10