Posts by Ian Burke

 
 
 

Sophos Update Issue – False Positive – SHH\Updater-B

Categories: Midd Blogosphere

On 9-19-12 around 5:40PM Sophos pushed an updated signature file which triggered a false positive virus detections identified as SHH\Updater-B. This signature may have fired on a number of different update files including Flash, Google, and most notably Sophos itself. Sophos has corrected this problem. For additional information please see the security website at http://Go/InfoSec.

Java 7 Update 6 Vulnerability

Categories: Midd Blogosphere

You may have recently heard or read about a new wide-spread exploit concerning Java in mainstream media outlets. LIS is aware of this risk. The major systems used by the College that depend upon Java (e.g. Banner, Hyperion, Nolij, Famis) use an earlier version of Java and are not vulnerable to this exploit. This vulnerability impacts Java 7 update 6 and possibly other versions of Java 7; Java 6 and below are not vulnerable to this exploit.

Java is used for many different applications and you should be thoughtful about your actions before patching, upgrading or removing your version of Java. While Oracle has released a patch for the current vulnerability it has also opened up a new loophole to a known older vulnerability.

Our advice at this time is to NOT update or patch your Java client to version 7. If your Java client has already been updated or patched to version 7, please remove Java completely from your Mac or Windows computer, and then visit http://java.com/en/download/manual_v6.jsp to reinstall version 6. If you are not sure what version of Java you are running  you may visit this URL to verify, http://www.java.com/en/download/installed.jsp.

LIS continues to remain vigilant in safeguarding our critical systems. If you have questions or concerns regarding this post, please contact infosec@middlebury.edu.

Virus Alerts

Categories: Midd Blogosphere

Two new threats are facing computers today that researchers are reporting as perhaps the biggest threats on the Internet. While current anti-virus definitions are catching these threats and our Sophos anti-virus solution protects the campus, many individuals, both Mac and PC owners, do not have their systems adequately protected.

Learn more at http://www.middlebury.edu/offices/technology/security

Sophos Deployment

Categories: Midd Blogosphere

Last month we began the campus rollout of Sophos Anti-virus, which is replacing the Symantec package we have been using for the past several years. We have deployed this anti-virus solution to many Windows based systems across campus. At this point we will continue the deployment to all faculty and staff Windows and Macintosh computers.

For Windows systems this will be delivered across our network using the same mechanism that manages our Windows workstations. To facilitate this deployment we need to ask that all Windows systems be turned off on Friday nights and powered back up on Monday mornings for the next several weekends. The install packages will be pushed across the network when the system is powered back on Monday morning starting March 19th.

If you should need your system over the weekend and you are off campus there will be no impact to this update. It will resume on Monday as scheduled. If you need your computer and are connected to the campus network (other than through the VPN) you will receive the update when you power your computer on.

For the deployment of Sophos to Macintosh computers we will be leveraging a utility called Casper. Casper will allow us to seamlessly remove Symantec and install Sophos. To ensure that Sophos will be successfully installed on your Macintosh system, please install Casper prior to March 16th. For instructions on obtaining Casper please see the Casper installation page at http://go/getcasper. Please note that Casper is licensed for Middlebury-owned systems only.

For information on Sophos please see the FAQ at http://go/sophos. This will answer many questions you may have and should address any issues you may encounter. Prior to the date your system is scheduled for the Sophos install please do the following:

  • Complete any software installs you may have pending, including any Windows Updates.
  • For Macintosh computers, confirm that you have the Self Service application installed in the Application Utility
  • Disable any additional firewalls you may have added beyond the operating system specific firewall. Please note, this is not referring to anti-virus such as Symantec but rather products such as SonicWall.
  • Shut down your system the Friday before the install so that it receives the scheduled install when it powers up on Monday morning.
  • Shut down your system on Monday night (after the scheduled install has occurred).

For faculty and staff who wish to install Sophos on one of their own personal systems, Middlebury is licensed for one copy per employee for home use. To download a copy for your home system please visit the Sophos FAQ at http://go/sophos .

For additional information please see http://go/sophos

 

 

NERCOMP Annual Conference Streaming on campus.

Categories: Midd Blogosphere

This year LIS will be streaming the annual NERCOMP conference on our Middlebury Campus. If you are interested in attending, the on-line conference will be held in KIRK all day both the 13th and 14th of March. To see the program of topics please visit, http://www.educause.edu/NC12/Program/Online. You are welcome to join for any part or all of the conference.

Sophos deployment continues

Categories: Midd Blogosphere

Last week we began the campus rollout of Sophos Anti-virus; which is replacing the Symantec package we have been using for the past several years. Last week we deployed Sophos to systems which are currently running Windows 7.  This week we will be deploying Sophos to Staff systems have yet to be upgraded. This will be delivered across our network using the same mechanism that manages our Windows workstations. To facilitate this deployment we need to ask that all Windows systems be turned off on Friday nights and powered back up on Monday mornings for the next several weekends. The install packages will be pushed across the network according to the following schedule:

  • February 19th: Windows7 systems
  • February 26th: Remaining  Staff workstations
  • March 4th: Remaining Faculty workstations and computers that have not been addressed in prior groups.

If you should need your system over the weekend and you are off campus there will be no impact to this update. It will resume on Monday as scheduled. If you need your computer and are connected to the campus network (other than through the VPN) you will receive the update when you power your computer on.

For information on Sophos please see the FAQ at http://go/sophos. This will answer many questions you may have and should address any issues you may encounter. Prior to the date your system is scheduled for the Sophos install please do the following:

  • Complete any software installs you may have pending, including any Windows Updates.
  • Disable any additional firewalls you may have added beyond the Windows Firewall. Please note, this is not referring to Anti-virus such as Symantec but rather products such as SonicWall.
  • Shut down your system the Friday before the install so that receives the scheduled install when it powers up on Monday morning.
  • Shut down your system on Monday night (after the scheduled install has occurred).

For additional information please see http://go/sophos

Sophos Anti-Virus for Windows Campus Roll-out

Categories: Midd Blogosphere
Next week will begin the campus wide release of Sophos Anti-virus for Windows. This will be delivered across our network using the same mechanism that manages our Windows workstations. To facilitate this deployment we need to ask that all Windows systems be turned off on Friday nights and powered back up on Monday mornings for the next several weekends. The install packages will be pushed across the network according to the following schedule:
  • February 19: Windows7 systems
  • February 26: Remaining  Staff workstations
  • March 4: Remaining Faculty workstations and computers that have not been addressed in prior groups.
For information on Sophos please see the FAQ at http://go/sophos. This will answer many questions you may have and will address many issues you may encounter. Prior to the date your system is scheduled for the Sophos install please do the following:
  • Complete any software installs you may have pending, including any Windows.
  • Disable any additional firewalls you may have added beyond the Windows Firewall. Please note, this is not referring to Anti-virus such as Symantec but rather products such as SonicWall.
  • Shut your system down the Friday before the install so that it powers up the Monday morning of the scheduled install. If you power your system up over the weekend the install will start at that time.
  • Shut your system down the Monday night after the install.
For additional information please see http://go/sophos