Educause Security Discussion mailing list archives
Re: Quick Survey - Does everyone do SOME form of "web filtering"??
From: Joel Rosenblatt <joel () COLUMBIA EDU>
Date: Sat, 8 May 2010 23:20:14 -0400
Except for SPAM filtering :-) Joel --On Saturday, May 08, 2010 11:18 PM -0400 Joel Rosenblatt <joel () columbia edu> wrote:
We do no filtering of any sort. Thanks, Joel Rosenblatt Joel Rosenblatt, Manager Network & Computer Security Columbia Information Security Office (CISO) Columbia University, 612 W 115th Street, NY, NY 10025 / 212 854 3033 http://www.columbia.edu/~joel --On Saturday, May 08, 2010 12:43 PM -0700 Walter Petruska <wpetruska () USFCA EDU> wrote:There are a range of possible answers here. I believe the original question has to do with 'web filtering' and 'blocking', not about tracking usage, or even collecting such data. The method you use, the IP ranges or networks filtered, and the policies put into place can all address those concerns. As it has also been stated, there certainly are times when 'web filtering' can provide appropriate tools- such as implementing blocks against sites serving malware or phishing schemes. There are the CIPA concerns, as well as several state laws which may regulate or require use of web filters: http://www.ncsl.org/issuesresearch/telecommunicationsinformationtechnology/stateinternetfilteringlaws/tabid/13491/default.aspx For those of you who host minors (18 and under and/or non-secondary school graduates) on your campuses during the summer for various programs- what do you put into place to protect them from inappropriate material for a minor while they are staying in your residence halls? Do you turn off network ports? Or allow them to surf the web openly? For the HEAR (Higher Education Act Reauthorization) 'suggestions' re: DMCA technical controls: web content filters, when subscribed to a categorization service, could also be used to pop up policy reminder pages for Appropriate Use Policies, but still allow users to 'burn through' the warning/reminder page and continue on to their destination. Again, with appropriate policies and logging- or aggregation of usage, there is no 'tracking' per se. Unless you'd like to know that you actively warned a student about going to a known malware, illegal activities, or questionable actions site, (your policy may ban P2P) and for correlation with the DMCA complaint when it later arrives and you're faced with student counselling issues such as 'oh, I didn't know that was against policy'. As I posted a similar earlier question on this topic and have product quotes in hand, I'm also eager to hear about people's implementations, policies, successes and failures. I believe that we are all committed to both protecting our community from threats, and protecting our precious privacy. Both of which seem like loosing battles. Walter Petruska, CISSP, CISA, CGEIT Information Security Officer University of San Francisco On Sat, May 8, 2010 at 6:27 AM, Willis Marti <wmarti () tamu edu> wrote:SCHALIP, MICHAEL wrote:Hi Folks..... Our Board decided about 3 years ago to require "web filtering" here. The concern related to "academic freedom" are mitigated through a simple request process. If a faculty member or student finds that an instructionally legitimate website is being blocked - all they have to do is submit a request to have the website passed through the web filter and they are in business. *My question: Does everyone do some sort of web filtering? If you *do* filter your web access - how long have you done so? And do you have a "bypass" process?*No. And I don't keep track of what sites they may visit (a side effect of your bypass process). Nor do I check what phone numbers are dialed, or books checked out of the library, etc, etc. We may temporarily block all access to a site serving malware or involved in the current phishing scheme, but content filtering belongs in K-12, not higher ed. Cheers, Willis Marti Director & CISO Networking and Information Security Texas A&M UniversityJoel Rosenblatt, Manager Network & Computer Security Columbia Information Security Office (CISO) Columbia University, 612 W 115th Street, NY, NY 10025 / 212 854 3033 http://www.columbia.edu/~joel
Joel Rosenblatt, Manager Network & Computer Security Columbia Information Security Office (CISO) Columbia University, 612 W 115th Street, NY, NY 10025 / 212 854 3033 http://www.columbia.edu/~joel
Current thread:
- Quick Survey - Does everyone do SOME form of "web filtering"?? SCHALIP, MICHAEL (May 07)
- <Possible follow-ups>
- Re: Quick Survey - Does everyone do SOME form of "web filtering"?? Willis Marti (May 08)
- Re: Quick Survey - Does everyone do SOME form of "web filtering"?? Childs, Aaron (May 08)
- Re: Quick Survey - Does everyone do SOME form of "web filtering"?? Adam Nave (May 08)
- Re: Quick Survey - Does everyone do SOME form of "web filtering"?? Will Froning (May 08)
- Re: Quick Survey - Does everyone do SOME form of "web filtering"?? Jeff Kell (May 08)
- Re: Quick Survey - Does everyone do SOME form of "web filtering"?? Patrick Goggins (May 08)
- Re: Quick Survey - Does everyone do SOME form of "web filtering"?? Walter Petruska (May 08)
- Re: Quick Survey - Does everyone do SOME form of "web filtering"?? Joel Rosenblatt (May 08)
- Re: Quick Survey - Does everyone do SOME form of "web filtering"?? Joel Rosenblatt (May 08)
- Re: Quick Survey - Does everyone do SOME form of "web filtering"?? Ozzie Paez (May 08)
- Re: Quick Survey - Does everyone do SOME form of "web filtering"?? Roger Safian (May 09)
- Re: Quick Survey - Does everyone do SOME form of "web filtering"?? Dennis Bohn (May 10)
- Re: Quick Survey - Does everyone do SOME form of "web filtering"?? Zach Jansen (May 10)
- Re: Quick Survey - Does everyone do SOME form of "web filtering"?? John C Borne (May 10)
- Re: Quick Survey - Does everyone do SOME form of "web filtering"?? Daniel Bennett (May 10)
- Re: Quick Survey - Does everyone do SOME form of "web filtering"?? Irish, Adrian L (May 10)
- Re: Quick Survey - Does everyone do SOME form of "web filtering"?? Fletcher, Robert (May 10)
- Re: Quick Survey - Does everyone do SOME form of "web filtering"?? Theresa Semmens (May 10)
- Re: Quick Survey - Does everyone do SOME form of "web filtering"?? Cal Frye (May 10)
(Thread continues...)