[26195] in resnet
Re: Switching from Cisco NAC to Impulse Safe Connect
daemon@ATHENA.MIT.EDU (Charles Benjamin)
Thu Apr 7 12:06:04 2011
Content-Class: urn:content-classes:message
Content-Language: en-US
Content-Type: multipart/alternative; boundary="_000_C250A26100766A4CACE3874A3000B3460C17F13201DSAEXMB1housi_"
MIME-Version: 1.0
Message-ID: <C250A26100766A4CACE3874A3000B3460C17F13201@DSAEXMB1.housing.ufl.edu>
Date: Thu, 7 Apr 2011 12:05:43 -0400
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: Charles Benjamin <Benjamin@housing.ufl.edu>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <BANLkTimkCGfh8fKcmr6yMgqcX2e6VLy38w@mail.gmail.com>
--_000_C250A26100766A4CACE3874A3000B3460C17F13201DSAEXMB1housi_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Marc,
At UF we (Housing) administer our own network for the students living on ca=
mpus and connect to, but is separate from the rest of the campus network. =
The UF campus security group send notifications to campus departments when =
they detect activity related to possible malware activity.
We installed a NAC (SafeConnect) on the Housing network (DHNet) last summer=
and then compared the number of security notifications we received the fir=
st weeks of Fall opening in 2009, before the NAC, to the Fall 2010 after t=
he NAC was installed. In the Fall of 2009, 38% of all campus security notif=
ications originated from our network. In the Fall 2010, 4.5% of all campus=
notification came from our network.
We have also seen a major corresponding drop in the number of students visi=
ting our helpdesk to remove the malware software.
In my opinion, using a NAC is being proactive rather than reactive protect=
ing; the network, servers, student computers, user data and saves time for =
the students and employees.
From: Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU] On Behalf Of Doughty, =
Marc
Sent: Thursday, April 07, 2011 11:21 AM
To: RESNET-L@LISTSERV.ND.EDU
Subject: Re: Switching from Cisco NAC to Impulse Safe Connect
Greetings,
I wonder if schools with NAC are having significantly less trouble tha=
n those who haven't implemented it. I've seen both, and I honestly couldn't=
say if NAC really improved the overall situation enough to warrant the ove=
rhead it incurred. Anyone see a worthwhile improvement in the overall secur=
ity/malware situation after going from nothing to NAC? Enough to justify th=
e time and cost of implementation?
- Marc Doughty
"If you aren't sure who is the give-way vessel, you are the give-way vessel=
."
On Wed, Apr 6, 2011 at 11:54 AM, Joe Hatch <jhatch@trinity.edu<mailto:jhatc=
h@trinity.edu>> wrote:
We're strongly considering switching from Cisco NAC to Safe Connect
Charles Benjamin | Senior Network and Systems Administrator CCSI 21905
University of Florida Department of Housing and Residence Education
PO Box 112100 | Gainesville, FL 32611-2100
office 352.392.2171 x10197 | fax 352.392.6819 | Benjamin@housing.ufl.edu<ma=
ilto:Benjamin@housing.ufl.edu>
P Before printing this e-mail think if it is necessary.
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives, go to http://LISTSERV.ND.=
EDU/archives/resnet-l.html ________________________________________________=
___
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--_000_C250A26100766A4CACE3874A3000B3460C17F13201DSAEXMB1housi_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<HTML xmlns=3D"http://www.w3.org/TR/REC-html40" xmlns:m=3D"http://schemas.m=
icrosoft.com/office/2004/12/omml" xmlns:o=3D"urn:schemas-microsoft-com:offi=
ce:office" xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:w=3D"urn:schemas=
-microsoft-com:office:word" xmlns:x=3D"urn:schemas-microsoft-com:office:exc=
el"><head><META content=3D"text/html; charset=3Dus-ascii" http-equiv=3D"Con=
tent-Type">
<STYLE><!-- /* Style Definitions */ p.e1eb92e7-91b4-4070-80=
b5-b14853a168e7, li.e1eb92e7-91b4-4070-80b5-b14853a168e7, div.e1eb92e7-91b4=
-4070-80b5-b14853a168e7, table.e1eb92e7-91b4-4070-80b5-b14853a168e7Table =
{margin:0cm; margin-bottom:.0001pt;} div.Section1 {page=
:Section1;} --></STYLE>
<meta content=3D"text/html; charset=3Dus-ascii" http-equiv=3DContent-Type><=
meta content=3D"Microsoft Word 14 (filtered medium)" name=3DGenerator><styl=
e><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><BODY STYLE=3D"FONT-SIZE: 9pt">
<P><FONT FACE=3D"Calibri,Arial"><div class=3DWordSection1><p class=3DMsoNor=
mal><span style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";colo=
r:#1F497D'>Marc,<o:p></o:p></span></p><p class=3DMsoNormal><span style=3D'f=
ont-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p>&nbs=
p;</o:p></span></p><p class=3DMsoNormal><span style=3D'font-size:11.0pt;fon=
t-family:"Calibri","sans-serif";color:#1F497D'>At UF we (Housing) administe=
r our own network for the students living on campus and connect to, but is =
separate from the rest of the campus network. The UF campus security =
group send notifications to campus departments when they detect activity re=
lated to possible malware activity.<o:p></o:p></span></p><p class=3DMsoNorm=
al><span style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color=
:#1F497D'><o:p> </o:p></span></p><p class=3DMsoNormal><span style=3D'f=
ont-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>We instal=
led a NAC (SafeConnect) on the Housing network (DHNet) last summer and then=
compared the number of security notifications we received the first weeks =
of Fall opening in 2009, before the NAC, to the Fall 2010 after the N=
AC was installed. In the Fall of 2009, 38% of all campus security notificat=
ions originated from our network. In the Fall 2010, 4.5% of all campu=
s notification came from our network.<o:p></o:p></span></p><p class=3DMsoNo=
rmal><span style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";col=
or:#1F497D'><o:p> </o:p></span></p><p class=3DMsoNormal><span style=3D=
'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>We have=
also seen a major corresponding drop in the number of students visiting ou=
r helpdesk to remove the malware software.<o:p></o:p></span></p><p class=3D=
MsoNormal><span style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif=
";color:#1F497D'><o:p> </o:p></span></p><p class=3DMsoNormal><span sty=
le=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>In=
my opinion, using a NAC is being proactive rather than reactive prot=
ecting; the network, servers, student computers, user data and saves time f=
or the students and employees.<o:p></o:p></span></p><p class=3DMsoNormal><s=
pan style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F4=
97D'><o:p> </o:p></span></p><p class=3DMsoNormal><span style=3D'font-s=
ize:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o=
:p></span></p><p class=3DMsoNormal><span style=3D'font-size:11.0pt;font-fam=
ily:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p cl=
ass=3DMsoNormal><span style=3D'font-size:11.0pt;font-family:"Calibri","sans=
-serif";color:#1F497D'><o:p> </o:p></span></p><p class=3DMsoNormal><b>=
<span style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</s=
pan></b><span style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif"'>=
Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU] <b>On Behalf Of </b>Doughty=
, Marc<br><b>Sent:</b> Thursday, April 07, 2011 11:21 AM<br><b>To:</b> RESN=
ET-L@LISTSERV.ND.EDU<br><b>Subject:</b> Re: Switching from Cisco NAC to Imp=
ulse Safe Connect<o:p></o:p></span></p><p class=3DMsoNormal><o:p> </o:=
p></p><p class=3DMsoNormal style=3D'margin-bottom:12.0pt'>Greetings,<br>&nb=
sp; I wonder if schools with NAC are having significantly=
less trouble than those who haven't implemented it. I've seen both, and I =
honestly couldn't say if NAC really improved the overall situation enough t=
o warrant the overhead it incurred. Anyone see a worthwhile improvement in =
the overall security/malware situation after going from nothing to NAC? Eno=
ugh to justify the time and cost of implementation?<br clear=3Dall><br>- Ma=
rc Doughty<br><br>"If you aren't sure who is the give-way vessel, you =
are the give-way vessel."<br><br><o:p></o:p></p><div><p class=3DMsoNor=
mal>On Wed, Apr 6, 2011 at 11:54 AM, Joe Hatch <<a href=3D"mailto:jhatch=
@trinity.edu">jhatch@trinity.edu</a>> wrote:<o:p></o:p></p><div><p class=
=3DMsoNormal>We're strongly considering switching from Cisco NAC to Safe Co=
nnect<o:p></o:p></p></div></div><p class=3DMsoNormal></p></div></FONT></P>
<P></P>
<TABLE STYLE=3D"COLOR: #595959; FONT-SIZE: 9pt">
<TBODY>
<TR>
<TD VALIGN=3D"top">
<P CLASS=3D"e1eb92e7-91b4-4070-80b5-b14853a168e7" STYLE=3D"FONT-SIZE: 9pt">=
<FONT FACE=3D"Calibri,Arial"><STRONG><FONT COLOR=3D"#0021a5"></FONT></STRON=
G></FONT> </P>
<P CLASS=3D"e1eb92e7-91b4-4070-80b5-b14853a168e7" STYLE=3D"FONT-SIZE: 9pt">=
<FONT FACE=3D"Calibri,Arial"><STRONG><FONT COLOR=3D"#0021a5">Charles Benjam=
in <FONT COLOR=3D"#595959">|</FONT><FONT COLOR=3D"#ff4a00"> Senior Network =
and Systems Administrator CCSI 21905</FONT></FONT></STRONG></FONT><STRONG><=
/STRONG><FONT SIZE=3D"+0"></FONT></P>
<P CLASS=3D"e1eb92e7-91b4-4070-80b5-b14853a168e7" STYLE=3D"FONT-SIZE: 9pt">=
</P>
<P CLASS=3D"e1eb92e7-91b4-4070-80b5-b14853a168e7" STYLE=3D"FONT-SIZE: 9pt">=
</P>
<P CLASS=3D"e1eb92e7-91b4-4070-80b5-b14853a168e7" STYLE=3D"FONT-SIZE: 9pt">=
</P>
<P CLASS=3D"e1eb92e7-91b4-4070-80b5-b14853a168e7" STYLE=3D"FONT-SIZE: 9pt">=
<FONT FACE=3D"Calibri,Arial">University of Florida Department of Housing an=
d Residence Education</FONT></P>
<P CLASS=3D"e1eb92e7-91b4-4070-80b5-b14853a168e7" STYLE=3D"FONT-SIZE: 9pt">=
<FONT FACE=3D"Calibri,Arial"></FONT></P>
<P CLASS=3D"e1eb92e7-91b4-4070-80b5-b14853a168e7" STYLE=3D"FONT-SIZE: 9pt">=
<FONT FACE=3D"Calibri,Arial">PO Box 112100 | Gainesville, FL 32611-2100</FO=
NT></P>
<P CLASS=3D"e1eb92e7-91b4-4070-80b5-b14853a168e7" STYLE=3D"FONT-SIZE: 9pt">=
</P>
<P CLASS=3D"e1eb92e7-91b4-4070-80b5-b14853a168e7" STYLE=3D"FONT-SIZE: 9pt">=
<FONT COLOR=3D"#595959" FACE=3D"Calibri,Arial">office 352.392.2171 x10197 |=
</FONT><FONT FACE=3D"Calibri,Arial">fax 352.392.6819 </FONT><FONT FACE=3D"=
Calibri,Arial">| <a href=3D"mailto:Benjamin@housing.ufl.edu">Benjamin@housi=
ng.ufl.edu</a></FONT><FONT SIZE=3D"+0"></FONT></P></TD></TR>
<TR>
<TD><SPAN LANG=3D"EN-GB" STYLE=3D"FONT-FAMILY: Webdings; COLOR: green; FONT=
-SIZE: 9pt"><FONT COLOR=3D"green" FACE=3D"Calibri,Arial"><SPAN LANG=3D"EN-G=
B" STYLE=3D"FONT-FAMILY: Webdings; COLOR: green; FONT-SIZE: 14pt"><FONT FAC=
E=3D"Palatino Linotype"><FONT FACE=3D"Webdings"><FONT SIZE=3D"2">P </FONT><=
/FONT><FONT COLOR=3D"#595959"> </FONT></FONT></SPAN><FONT FACE=3D"Arial">Be=
fore printing this e-mail think if it is necessary.</FONT></FONT> </SPAN></=
TD></TR>
<TR>
<TD><FONT COLOR=3D"green" FACE=3D"Calibri,Arial"></FONT></TD></TR></TBODY><=
/TABLE>
<P CLASS=3D"e1eb92e7-91b4-4070-80b5-b14853a168e7"> </P><FONT FACE=3D"V=
erdana"><div class=3DWordSection1><p class=3DMsoNormal>____________________=
_______________________________ </p></div><div class=3DWordSection1><p clas=
s=3DMsoNormal>You are subscribed to the ResNet-L mailing list. <o:p></o:p><=
/p><p>To subscribe, unsubscribe or search the archives, go to <a href=3D"ht=
tp://LISTSERV.ND.EDU/archives/resnet-l.html">http://LISTSERV.ND.EDU/archive=
s/resnet-l.html</a> ___________________________________________________ <o:=
p></o:p></p></div></FONT>=20
<P></P>
<P></P></BODY></HTML>=
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--_000_C250A26100766A4CACE3874A3000B3460C17F13201DSAEXMB1housi_--
