Re: Macintosh and Tiger (10.4) security

[Michael Derry <Michael.Derry () EMORY EDU>]

We are currently working on adding our (500+) Macs to our existing
Active Directory environment.  This (hopefully) will ensure proper
user authentication, allow connectivity to our new centralize file
solution, and give us some "management" over the local clients.

Emory uses Norton/Symantec for client AV for Mac and Windows.
Unfortunately, Macs have not been the leader in viruses so the
development has always fallen short.  However, Symantec has recently
released a managed version of AV for Mac that will allow a
centralized console to push out updates.  It doesn't work yet in our
environment because multicast is not enabled on most of our routers,
we haven't been able to test it.

As a rule of thumb, all of our users have full admin privs on their
local machines.  However, we do turn off file and print sharing via a
group policy for Windows and will hopefully do the same to the Mac
clients once we start managing them more centrally.

Michael Derry
Manager, Emory College Computing Support
Emory University
Michael.Derry () emory edu


On May 18, 2005, at 2:24 PM, James H Moore wrote:

> We have a significant Mac population on campus.  We are looking for
> solutions.  I would like to know what others are doing.  We
> recently implemented a desktop standard that had some flexibility
> built in.  Mac people range from frustrated (that our vendor
> doesn't support 10.x very well), to level-headed (risks are low
> now, with a lot of folks concentrating on Windows -- enjoy the
> benefits of the low risk environment), to the arrogant (viruses,
> intrusions are things that happen with Windoze).
>
> I want a reasonable response.  One of the problems is that on Mac
> support and Mac security sites, I find that all 3 A/V vendors are
> panned.  Internally, we have found significant overhead from Virex.
>
> What are others doing?
>
> Jim
> - - - -
> Jim Moore, CISSP, IAM
> Information Security Officer
> Rochester Institute of Technology
> 13 Lomb Memorial Drive
> Rochester, NY 14623-5603
> (585) 475-5406 (office)
> (585) 475-4122 (lab)
> (585) 475-7950 (fax)
>
> ""In the middle of difficulty lies opportunity." Albert Einstein
>
> "The release of new internet threats have not created a new
> problem. It has merely made more urgent the necessity of solving an
> existing one." Parallels quote by Albert Einstein on atomic energy
>
>
>
>
>
> ********** Participation and subscription information for this
> EDUCAUSE Discussion Group discussion list can be found at http://
> www.educause.edu/groups/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.