[851] in resnet
Re: Virus Policies
daemon@ATHENA.MIT.EDU (Maura Fennelly)
Fri Feb 15 14:46:24 2002
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii" ; format="flowed"
Message-ID: <p05100303b893081a03d8@[148.85.8.105]>
Date: Fri, 15 Feb 2002 14:43:48 -0500
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: Maura Fennelly <mkfennelly@AMHERST.EDU>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <5.1.0.14.2.20020215082502.00b1f0b0@stan.mail.ncsu.edu>
We don't require that the students have up-to-date anti-virus
software. We did buy licensing for VirusScan to cover everyone -
students, faculty, staff. We are scanning for viruses on the mail
server as well, which helps a lot.
Last fall, we started informing students infected with Nimda an other
virulent viruses that we would disconnect them from the network if
they didn't clean up. (We invoked part of our AUP reqarding use of
the network.) We will send a Student Network Specialist to help them
if they need it. So far we have only disconnected one person. Most
students are rather chagrined to find out that their computer has a
virus and is actively trying to infect other people.
The hard part, as least with Nimda, is explaining what needs to be
done to keep them from getting infected again. We have had several
repeats.
It is not just installing up-to-date anti-virus software. You have
to do all of the Windows patches as well. And the directions from
McAfee on removal are not the most lucid. I know what I doing and
generally have to read them several times to figure them out. We
actually end up writing our own instructions for Nimda removal. Does
anyone else find that they have to do that often?
>I have a further virus policy question for folks:
>Do any of you *require* your students to have up-to-date anti-virus
>software on their computers if they are hooked up to your campus network?
>We are considering adding this to our ResNet Terms and Conditions. Of
>course it is not really enforceable unless you go to the extreme of
>requiring a managed client, but it's sort of like vehicle inspections...you
>may not get pulled over for it unless you're spewing smoke, but if you get
>pulled for speeding and have an out of date inspection, you'll get ticketed
>for that as well.
>
>I would be interested in hearing from any schools who have already
>implemented such a policy. How do you respond if someone is found in
>violation of the policy, especially if you find out because they call up
>asking for help with removing a well-known worm that has been around for a
>year?
>
>As for Lisa's question, like many other campuses we have a site license for
>Norton AV Corporate Edition for both university and personally-owned
>computers. We offer both the managed and unmanaged versions, but encourage
>our students on ResNet to install the managed version so the definition
>files get pushed out to them instead of them having to run Live Update.
>After the fall rush our staff assists students with virus removal.
>
>This could be a panel presentation at this summer's conference.....
>
>Cheers,
>
>Stan
>
>At 07:38 AM 2/15/2002 -0500, you wrote:
>>Hi,
>>I am interested in how other ResNet's handle Viruses. Do any of you give
>>students Virus Protection software? Update DAT files? Clean systems? etc...
>>
>>-Lisa
>
>
>Stan North Martin stan_martin@ncsu.edu
>ResNet Coordinator, Information Technology (919) 515-1348
>North Carolina State University http://www.ncsu.edu/resnet
>
>___________________________________________________
>You are subscribed to the ResNet-L mailing list.
>
>To subscribe, unsubscribe or search the archives,
>go to http://LISTSERV.ND.EDU/archives/resnet-l.html
>___________________________________________________
--
Thanks, Maura
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________