Re: Networking Design Recommendations for Scientific Equipment

[Alex Keller <axkeller () STANFORD EDU>]

Nicklaus et al,

I don’t have any specific recommendations to share but am keenly interested in this topic. We support dozens of 
research labs with network capable scientific equipment (either direct Ethernet/WiFi or via a workstation purpose built 
and sold with the device) which does NOT meet our campus minimum security standards for network access. These 
conditions have organically evolved into labs without any network (Sneakernet and USB drives), private LANs with no 
Internet gateway, folks lobbying for exceptions to the standards, rogue WiFi, LTE hotspots, and everything in between.

I’ve mused about possible approaches like a private LAN with hardened proxy kiosk for access (and export of data) to 
the public network.

I would be happy to discuss offline, please keep me posted.

Best,
Alex

Alex Keller
Stanford | Engineering
Information Technology
axkeller () stanford edu<mailto:axkeller () stanford edu>
(650)736-6421

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Nicklaus 
Giacobe
Sent: Tuesday, June 12, 2018 9:21 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Networking Design Recommendations for Scientific Equipment

Does anyone have documented recommendations for plugging scientific equipment into campus computer networks?  I’ve been 
asked to consult for a local lab whose scientists are having some difficulty communicating with their IT support folks. 
 I can imagine lots of recommendations for no networking, local area networking only, no wireless, yes wireless, 
VLANed, firewalled, bridged control systems, never having control systems with Internet access, etc.

So while I am interested in hearing from you regarding specific individual recommendations, I’m more curious if there 
are specific documented recommendations and plans that sit somewhere between “Great ideas shared among colleagues” and 
a top-level policy guidance document that I might get from NIST.

---
Nicklaus A. Giacobe, Ph.D.
Director of Undergraduate Programs and Assistant Teaching Professor
Phone: 814-865-8233
College of Information Sciences and Technology
Penn State University
E333 Westgate Building
University Park, PA 16802