Middlebury

Campus Manager and Quarantine

Revision as of 18:00, 8 January 2010 by Christopher Hunt (talk | contribs) (Quarantine information)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

About Registration and the Campus Manager

A campus like Middlebury relies on a smoothly functioning and well-protected network which provides access not only to the internet, but also to our secure file servers, email, and other on-campus resources. If any viruses or attacks on our network are detected, it's vitally important for us to know where they came from - what computer is responsible, and what person that computer belongs to. There's no way for us to know this without registering all computers that connect to the network.

To do this job, we set up the Campus Manager to register all computers on campus. Campus Manager has several related tasks:

  • Identify computers that have not been registered on the network and isolate them until they comply with our requirements for system safety.
  • Remember every computer and who owns it so that if it is lost or stolen, Public Safety can potentially help the owner recover it.
  • Freeze the access of any computer that is sending out SPAM, spreading viruses, or performing other chicanery, and notify the owner so that they can get help fixing the problem.

What registration means for your privacy

Campus Manager remembers the IP addresses, or internet addresses, that your computer has connected to on our network. We do not keep track of the websites you visit, the emails you write, what you download, etc.

If your computer is stolen or lost, we can use Campus Manager's records to try to find out where it is the next time it connects to the internet.

Every year we get a bundle of lawsuit letters from the RIAA informing us that they have seen students on our network downloading or distributing music illegally using peer-to-peer file sharing software, listing the IP addresses that identify those students, and requesting that we stop all such activity immediately. When we get such a letter, we email you to let you know that you have been caught (allegedly) doing so, and ask you to stop. We do not pass your name or any identifying information back to the RIAA, unless the matter comes to a lawsuit and we are legally required to do so.

Quarantine

When Campus Manager detects that your computer does not meet its safety requirements for membership in the Middlebury College network, it puts your computer in quarantine. This might happen if:

  • Your computer is infected and is spreading viruses on campus
  • Your computer does not have the minimum required security updates that we expect all Middlebury computers to have
  • SPAM is being sent from your email address

Generally, you will find out quickly if your computer is in quarantine. You won't be able to access most web pages and your internet browser will typically be redirected to our Network Quarantine page.

Getting out of quarantine

To get out of the quarantine, first you need to fix whatever security holes existed that caused Campus Manager to put you into the quarantine. After you've done that, contact the Helpdesk (x2200) and explain what steps you have taken to address the problem.

We generally suggest the following steps:

  • Run a thorough virus scan using Symantec or your antivirus program. If you don't have antivirus software installed, please install it as soon as possible; you can install our SAV client at this link.
    • If you are using Windows, we also recommend that you scan for viruses using an additional program called Malwarebytes. You can download and install it for free at malwarebytes.com.
  • Update your operating system using its system updates tool. This installs any routine security fixes.
    • In Windows, ensure that Automatic Updates are turned on in the Control Panel.
    • In Mac OSX, look for Software Update under the Mac Apple Menu icon.PNG menu.
  • In Windows, enable the Windows Firewall. You can find the firewall settings under Control Panel (Windows XP SP2 or later).
  • Change your Middlebury password. Go to the address go/activate to change your password (you'll need to know your user ID and your BannerWeb PIN to do so).
    • Take your password security seriously if you are in quarantine. If your computer has been seriously infected with viruses, or especially if your email account has been sending out spam, some attacker probably has learned your account password and could potentially have access to see and/or delete all of your files, email, and information.
    • If the password that you use to log onto your computer is not the same as the password that you use to access your Middlebury mail, files, etc., consider changing the password on your computer as well.

See Virus and Malware Street Smarts for more general tips on computer security.