The degree of monitoring on campus varies depending on the location of the system. For most users the only traffic that is inspected for signs of compromise is traffic that goes off of the campus network or is directed at systems protected by our firewalls. For people on networks protected by a firewall there is additional monitoring at the firewall location.
When it comes to the Restricted VPN the monitoring occurs for almost every packet that leaves the systems connected to the VPN.