CalNetAD Security Subcommittee

May 29, 2003

Updated: 06/06/2003

Agenda

1. Okena update

2. Firewalls

3. IPSEC Filters

4. SUS

5. Other

Notes

Attending: John Ives, Karl Grose, Ryan Means, Forrest Smalley, Kevin Burney, Eric Chamberlain

Okena update

• Deployed on test and production DCs
• Blocking NetBIOS to UC DCs
• Can't block NetBIOS traffic to CAMUS domain until campus has a VPN

Firewalls

The Subcommittee endorses the Firewall Task Force report.

IPSEC Filters

• COIS has implemented test filters
• Others can link and use the OPSEC policies
• Subcommittee requests that IPSEC filters and uses be documented on CalNetAD web site
• Subcommittee would like general policies (block off-campus traffic, etc.) that are available for use by any OU

SUS

• Discussion about benefit to departments if run as a central service
• Subcommittee would like a GPO to push windows update settings to machines on campus
• Subcommittee would also like a GPO to push the updated WU tool

Other

Subcommittee would like announcements when changes are made to GPOs or in CMS.

Subcommittee is still looking for someone to develop a GPO to lock down end user machines.

Kevin Burney has volunteered to head the Security Subcommittee. John Ives has accepted an internship with SNS that will not leave him enough time to devote to the Subcommittee. The Subcommittee thanked John for volunteering to create and head the Security Subcommittee.