Educause Security Discussion
mailing list archives
Re: Calea question
From: Tracy Mitrano <tbm3 () CORNELL EDU>
Date: Fri, 7 Dec 2012 01:11:12 +0000
There are essentially two prongs to the test:
1. Is it a network that sells services to the public (not provides guest access, but sell services, or in the case
of municipal access it would have to be to the entire municipality)?
2. Is technical access direct to the Internet or does it go through designated "pipes"?
If the answer to either of these questions is yes, then CALEA may apply; if not, it is a private network and does not
have to comply with the law.
On Dec 6, 2012, at 7:26 PM, Kenneth G. Arnold wrote:
It is my impression that as long as you limit access to only certain people on your network it is still considered to
be a private network. The person has to request something from the school in order to gain access to the network. In
the case of a family the family member who is a student is requesting access for the rest of the family and the
school grants that permission. This is not the same as the other members of the family just coming to the campus and
immediately getting access to the network without any prior permission. Don't you have outside groups coming to your
campus for meetings and expecting network access when they are present? The school most likely grants them access but
they have to request the access. They are not students, faculty or staff either.
From: The EDUCAUSE Security Constituent Group Listserv [SECURITY () LISTSERV EDUCAUSE EDU] on behalf of Mark Reboli
[mreboli () MISERICORDIA EDU]
Sent: Thursday, December 06, 2012 3:58 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Calea question
How do you handle giving access to wives or children of employees while maintaining CALEA compliance? For example if
you have a married couple on campus the wife is a student and thus providing her access is still a private network.
If you provide her husband access, or their teen child of which neither the husband or teenager are students or
employee does this then mean that you have to declare your network public and thus complete the compliance piece for
Network/Telecom/IT security Manager