Home page logo
/

educause logo Educause Security Discussion mailing list archives

Re: Network access control
From: jkaftan <jkaftan () UTICA EDU>
Date: Thu, 25 Jan 2007 13:48:41 -0500

Russell:

What are you doing with PTP restrictions?  Are you just denying them if they
have PTP software installed.?

-----Original Message-----
From: Russell Fulton [mailto:r.fulton () AUCKLAND AC NZ]
Sent: Sunday, January 21, 2007 3:05 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Network access control

Wes Young wrote:
On Mon, 2007-01-22 at 08:17 +1300, Russell Fulton wrote:

we use packetfence (which hooks up to snort) to automatically quarantine
suspected infected machine on our residence network.  Students have to
call the help desk and I am almost never involved.


Do they get a "first strike, fix it yourself" ? or just tagged, bagged
and forced to hit the helpdesk on first incident?

Wes,

Just in case you had any doubts ;-) we are not nice guys when it comes
to students in residences!  First strike and you are in quarantine, but
they do release them if they call up and say they have fixed the
problem.  If address is re-quarantined then  they get charged $50.  We
also use this for enforcing p2p file sharing restrictions.

Russell.

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]