Re: Replacing NetReg with ?

["Keller, Alex" <axkeller () STANFORD EDU>]

Greetings Rand,

Thank you for the response. I understand Professor Byfield was writing with a specific agenda and that his forensic 
analysis of the agent isn't as detailed (or perhaps accurate) as a Mandiant deep dive. Motivations aside, any 
(whitehat) effort to examine a product (commercial or open source) for security defects should not go unappreciated.

It is all too common for institutes to purchase and implement technologies with little or no security vetting and even 
more troubling that many security vendors seem bewildered when you ask if they have pen tested their own product. You 
never have more leverage than before the PO is signed and if you can insert a cursory security review into the 
procurement process you may find a rare opportunity for significant impact at low investment.

Had to look up the Emerson quote :)

Sincerely,
Alex


Alex Keller
Information Technology
Stanford School of Engineering
axkeller () stanford edu<mailto:axkeller () stanford edu>
(650) 736-6421
[Description: SoE_IT_Logo]

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Hall, 
Rand
Sent: Thursday, February 20, 2014 8:08 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Replacing NetReg with ?

> Professor Ted Byfield's examination (circa 2010) of the Safe.Connect NAC agent is
> an interesting technical read regardless of where you stand on the privacy concerns.

> http://a.parsons.edu/~byfieldt/perm/safeconnect_report-pub.pdf


This may look technical in places but it is anything but. It is a wildly speculative privacy appeal. Unfortunately 
Byfield didn't understand the underlying architecture requirements. That evil site 
(auth.impulse.com/198.31.193.211<http://auth.impulse.com/198.31.193.211>) is required to be statically routed to the on 
campus appliance. That traffic never makes it off campus (to the big secret database).

"The louder he talked of his honor, the faster we counted our spoons." ;-)



Rand

Rand P. Hall
Director, Network Services                 askIT!
Merrimack College
978-837-3532
rand.hall () merrimack edu<mailto:rand.hall () merrimack edu>

If I had an hour to save the world, I would spend 59 minutes defining the problem and one minute finding solutions. - 
Einstein

On Wed, Feb 19, 2014 at 1:57 PM, Keller, Alex <axkeller () stanford edu<mailto:axkeller () stanford edu>> wrote:
Professor Ted Byfield's examination (circa 2010) of the Safe.Connect NAC agent is an interesting technical read 
regardless of where you stand on the privacy concerns.

http://a.parsons.edu/~byfieldt/perm/safeconnect_report-pub.pdf
https://www.eff.org/deeplinks/2011/10/safeconnect-universities-peer-peer-file-sharing

Best,
alex

Alex Keller
Information Technology
Stanford School of Engineering
axkeller () stanford edu<mailto:axkeller () stanford edu>
(650) 736-6421<tel:%28650%29%20736-6421>


From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () 
LISTSERV EDUCAUSE EDU>] On Behalf Of Jeffrey Sabin
Sent: Wednesday, February 19, 2014 7:24 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Replacing NetReg with ?

Hello everyone - We are looking to replace our old, highly customized NetReg environment with something more modern and 
secure. We've looked at the Safe Connect product for example.

Has anyone else undertaken a similar endeavor and how did it go? If you are not using NetReg today, what are you using?

Just beginning to whittle down our options so any experience tales or advice would be most appreciated.

Many thanks!

Jeff

Jeffrey D. Sabin
INFORMATION SECURITY OFFICER/HEAD OF, INFRASTRUCTURE & SECURITY SERVICES

Dial Center
2507 University Avenue    Des Moines, Iowa 50311-4505
Tel  515.271.2935<tel:515.271.2935>
Fax 515.271.1938<tel:515.271.1938>
1.800.44.DRAKE x2935
E-mail jeff.sabin () drake edu<mailto:jeff.sabin () drake edu>