Re: Students' computers...

From: Dazz (cashdj_at_hotmail.com)
Date: 10/01/05


Date: Sat, 01 Oct 2005 12:07:19 +1000

On Fri, 30 Sep 2005 23:15:59 +0100, Steve Welsh <sjw@stevew.net>
wrote:

<snipped>

>If they take on 'the' site license software and they are connected to
>the campus network, it's done automatically. But in any case it is many
>orders of magnitude better than just a couple of years ago, when the
>protection was _zero_ :(

Yeah, there always has to be a starting point. As long as no-one gets
complacent about it and thinks "Well, we've done our bit and that's
all we have to do".

> What about security
>> patches? Are campus staff insisting that they also use firewalls?
>
>They are behind the campus firewall anyway

My concern would be more about what was happening on the internal
network
 
>> Exactly how much is managed by the campus staff and how much is left
>> in the hands of the users?
>>
>> How do campus staff enforce these policies and ensure that they are
>> adhered to?
>
>Dunno - not that close to it :-O

Ahh.
 
>> Is the network segmented or isolated from other more sensitive areas
>> of the network?
>
>Yes, very much so

That's always good. :-)
 
>> Are campus staff also employing the use of firewalls and anti-virus
>> gateways to help protect the network?
>
>As above

The questions I asked are more or less the same questions that the
Library I'm currently contracting at will find itself in very shortly
(and to a lesser degree, the situation they are already in).

Currently, our staff are using the same servers (Citrix environment)
and network as the library patrons. The really cluey patrons out
there can literally access many of the same services that staff
access, even though we've tried to nail them down as much as possible.

Unfortunately, being a Gov entity, there are so many levels of
beaurocracy that it's not funny. When I first walked in (a few months
back) I looked at the current setup and said "Oh, my freaking god"
(substitute "freaking" for another word ;-P ).

Because the Library is supposed to be "open" for the patrons and
because senior management believe in enforcing this "openness" (at the
cost of security), we are in a constant struggle to stay on top.

They have plans to introduce wireless access for the patrons once the
new building is opened up, and we are going to find ourselves in a
similar position to that which was described in the OP's first post,
and your response. :-(

Hopefully, senior management will listen to what we have to say - but
I suspect they won't. :-(

Dazz



Relevant Pages

  • Re: 2.6.0-test9 : bridge freezes
    ... > bridge to isolate the Internet from the campus. ... To nullify network ... > flooding effect, we have used iptables. ... send the line "unsubscribe linux-kernel" in ...
    (Linux-Kernel)
  • Re: Spercified network name is no longer available....????
    ... This machine is copying data to and from a cifs server volume that is ... off campus. ... network, and found nothing that would cause this. ... and the NAT log didn't show any errors that I thought would ...
    (comp.dcom.sys.cisco)
  • Re: 2.6.0-test9 : bridge freezes
    ... anand@eis.iisc.ernet.in (SVR Anand) wrote: ... > that is connected to Internet. ... > Internet from the campus. ... To nullify network flooding effect, ...
    (Linux-Kernel)
  • Re: Spercified network name is no longer available....????
    ... This machine is copying data to and from a cifs server volume that is ... off campus. ... network, and found nothing that would cause this. ... and the NAT log didn't show any errors that I thought would ...
    (comp.dcom.sys.cisco)
  • Post doc position =?windows-1252?Q?=93Functional_genomics_of?= =?windows-1252?Q?_Fish_enviro
    ... Centre of Marine Sciences, Univeristy of Algarve, Campus ... This project is developed within the framework of the Network of Excellence Marine Genomics Europe, which implies collaboration and coordination between several laboratories aimed at developing and applying cDNA and oligo microarrays. ...
    (sci.research.careers)

Quantcast