Re: Firewall with MAC address ACL that is dynamic

bjriffel_at_ho__tmail.com
Date: 09/28/05 

Date: 28 Sep 2005 10:06:52 -0700

Well we HAVE to do something. Not ALL students have antivirus
installed, or don't update it regularly. We don't have the staff to
visit each machine to check for these things.

The problem is, that last spring our ISP was 2 days away from closing
our connection due to virus activity and traffic coming from our
network. Would it be better for us just to set up snort or something
on that network to detect virus/trojan activity? Then we would just
record the MAC address of the infected machine, and disable their port
on the Cisco switch? Then what..... tell the student they aren't
allowed back on until what? We would still have to go check their
machine wouldn't we? I'm really new to the University IT field (I
worked in healthcare before and didn't have to worry about students
rights). We get the McAfee cheap (like $1.25 each) for students
because of our site license for the campus network.

Relevant Pages

  • Re: Firewall with MAC address ACL that is dynamic
    ... >our connection due to virus activity and traffic coming from our ... >on that network to detect virus/trojan activity? ... >worked in healthcare before and didn't have to worry about students ... students need. ...
    (comp.security.firewalls)
  • Re: how to stop a users internet access???
    ... the network administrator or maybe some policy was in the way. ... use of innocent students to do their dirty work.... ... I think we all agree that the internet can be addictive to people, ...
    (microsoft.public.windowsxp.general)
  • Re: Network Hacking
    ... Network security. ... If the teacher's assignment includes activities that the sys ... >This is the same convoluted logic that had others claiming that students ... >> conduct security assessments. ...
    (microsoft.public.win2000.security)
  • RE: [Full-Disclosure] "MS Blast" Win2000 Patch Download
    ... >> I guess we just have a diferent approach to laptops and the corporate ... >> network is if it has been cleard by the IS department. ... You have 50,000 students living in dormitories, ... > network when they walk up from the dorms. ...
    (Full-Disclosure)
  • Re: Educational Security Assessment project for Northern Virginia Community College students.
    ... For $140US you can have a year of access to the internet-based ISECOM ... Hacker Highschool test network. ... > I'm a student enrolled in the Information Systems Security Certification ... > certification is considered a specialization for students who already ...
    (Pen-Test)