Re: Appropriate University/Internet blocks

["Davis, Thomas R. (indiana.edu)" <tdavis () INDIANA EDU>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ----Original Message----
From: The EDUCAUSE Security Discussion Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Tom Conley Sent:
Wednesday, June 16, 2004 9:21 AM To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Appropriate University/Internet blocks

> What is the appropriate level of filtering or port blocking at A
> University/Internet border?

We, like others who have posted, do a considerable amount of
filtering at our border routers (contact me directly if you want more
specifics, Tom).  The important thing that hasn't been mentioned (or
perhaps it has and I've missed it) is that a VPN service is extremely
helpful in supporting your case to institute many of these filters. 
Your response to several of the "You can't block port n because I
won't be able to do x from home." will be "Sure you can, just
establish a VPN connection first."

- -- 
Tom Davis, Information Technology Security Officer, CISSP, CISM
Office of the VP for Information Technology, Indiana University
PGP key or S/MIME certificate: https://www.itso.iu.edu/staff/tdavis/

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.3

iQA/AwUBQNMPe3MQ7XQGtBENEQIQPACeLUy/QLSC9yNS977Zaz5X4cjrjukAoMeV
pSvwOwNFQWDuUG5MVKIOCUO3
=xgO4
-----END PGP SIGNATURE-----

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.