Home page logo

educause logo Educause Security Discussion mailing list archives

Re: Public networks under CALEA
From: Jay Tumas <jay_tumas () HARVARD EDU>
Date: Tue, 20 Mar 2007 22:48:13 -0400

It's my understanding that to be compliant with the order, you have to
be able to
feed the specific border traffic of interest to the target LEA traffic
in a particular
standards based format.  That's why folks at SS8 and Verint (providers
of services
and compliant equipment respectively) are *real* busy these days - it's
the custom
feed to the LEA that is the roadblock to a simple "homegrown" solution.


Jay Tumas, NSA IAM/IEM
- Network Operations, Security and Incident Response Team Manager
- University CALEA Compliance Officer
- Longwood Medical Area Technical Subcommittee Chair
- Boston Infragard Members Alliance, Executive Board Member
       Harvard University - UIS/Network Operations Center
                  60 Oxford Street, Suite 132
                     Cambridge, MA. 02138
       Office: 617-496-8500  Mobile Device: 617-733-6169
"The first method for estimating the intelligence of a ruler is
to look at the men he has around him." - Niccolo Machiavelli

Basgen, Brian wrote:
  Our institution believes that we fall under the "public network"
provision of the FCC order that data networks are included in CALEA,
since we offer wireless access to the public.[1]

 I'm curious to know what other institutions, who have portions of their
data network that similarly are bound to CALEA, are doing to comply. Our
general interpretation at this point is that a dedicated SPAN switchport
dumping selected traffic to a workstation would be sufficient to comply.

[1]  The Application of CALEA to Higher Education Networks, ACE,

Brian Basgen
IT Systems Architect, Security
Pima Community College

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]