Re: HEOA Question

["Gibson, Nathan J. (HSC)" <Nathan-Gibson () OUHSC EDU>]

Every DMCA violation we have received has a date, time, and port used. With this information we can filter the firewall 
logs for the date time and port and find the offending internal address.  The trick is correlating that IP address to a 
MAC address. If You are using DHCP this can be tricky unless you are keeping your DHCP logs and you can further 
correlate.



From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of William 
Derwostyp
Sent: Monday, January 31, 2011 8:44 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] HEOA Question

I need some input.
Here at USM the students are segregated to a wireless network that is now behind a single address(NAT). This has caused 
a problem with responding to RIAA notices as we cannot tie the notice to a specific user on the network which in turn 
affect the compliance to the "Higher Education Opportunity Act" (HEOA).

I am going to assume that there are other universities that use the NAT process to control traffic on their perimeter 
and use non-routable addresses on the internal network. Is there any tool or application I can use that will help to 
tie the notices back to the person without having to go back to public addressing?

William (Bill) Derwostyp,
CISSP, G7799, GCIH, GSNA, GSLC, GSPA, GSEC, CCNA, CCSE
Technology Security Officer University of Southern Mississippi
william.derwostyp () usm edu<mailto:william.derwostyp () usm edu>
Office: 601-266-5416

[cid:image001.jpg@01CBC189.FE489100][cid:image002.jpg@01CBC189.FE489100]
Confidentiality Note: The information contained in this e-mail and/or document(s) attached is for the exclusive use of 
the individual named above and may contain confidential, privileged, and non- disclosable information. If you are not 
the intended recipient, you are hereby notified that you are strictly prohibited from reading, photocopying, 
distributing or otherwise using this e-mail or contents in any way. If you have received this transmission in error, 
please notify me immediately.