March 17th, 2006 by Lyle Wiedeman
As the number and severity of security challenges continues to grow, NACS works hard to ensure that UCInet remains a useful, robust, and safe place to work. Towards that end, NACS now offers campus units the opportunity to block incoming network connections to their systems. Connections initiated from systems on your network will continue to work, so typical usage such as web browsing, email, instant messaging, and so forth, will be unaffected.
In order to support those services on your systems that do rely on incoming connections (such as web servers), NACS offers server registration. Using a simple form, you can identify which systems, and which services on those systems, need to be accessible from off-campus.
A number of departments are already using server registration in conjunction with inbound connection blocking in order to improve the security of their environments with great success. It is a good idea to begin using server registration, even if you are not yet contemplating inbound connection blocking. To learn more, or to get started, please visit:
http://www.nacs.uci.edu/network/servers/
January 31st, 2005 by Dana Roode
NACS is working hard to ensure that a robust and secure UCInet is always available to do the University’s business. To that end, we will occasionally deny access to systems which threaten the safe operation of the network.
Whenever a system connected to the UCInet is discovered attacking other computers, or engaging in other forms of inappropriate behavior (such as the illegal distribution of copyrighted material), NACS may block that system from further network access. Occasionally, NACS may also block systems that have not been patched in a timely manner against particularly nasty viruses.
There are two simple strategies you can follow if you suspect your system has been blocked. You can search the blocked systems list athttp://www.nacs.uci.edu/ucinet/blocked/ (usually, you’ll need to use an unblocked system to do that). Or, you can call NACS at (949) 824-2222. Our helpful consultants will explain why your system was blocked, and what to do to correct the problem. Generally, once you have taken the appropriate steps, the system can be unblocked within a few hours. Please note, however, that unblocking can only be performed during regular business hours except in emergency situations.
NACS is responsible for UCInet, but you are responsible for the proper operation of your own systems. By staying up to date on security patches, and by carefully abiding by the Computer and Network Use Policy at http://www.policies.uci.edu/adm/pols/714-18.html you can preserve your access to the UCInet and help guarantee a secure and reliable service for the entire campus.