Conference Panel on Campus Virus Protection

1
Conference Panel on Campus Virus Protection

• CHECK
• Kansas State University
• May, 2000

2
Panel Members

• FHSU Mike Nease, Microcomputer Technician,
  Computing and Telecommunications Center
• FHSU Mark Orth, System Support Technician,
  Computing and Telecommunications Center
• KU Mickey Waxman, Stats Consultant/Programmer,
  Academic Computing Services
• KSU Jeanette Harold, Director, Information
  Technology Assistance Center

3
Panel Members (continued)

• KUMC Scott Ramsey, Associate Director,
  Telecommunications and Networking
  
• PSU Elizabeth Shannon, Assistant Director of
  Academic Services, Information Services
• WSU Steve Dickerson, Manager of Academic
  Computing, University Computing and
  Telecommunication Services

4
At KUMC

• We are licensed for McAfees VirusScan and
  WebShield (4,000 workstations)
• Approximate cost 9.00 per license (over two
  years licensing period ends 6/30/2000)
• Site license allows home installation
• VirusScan used for desktops and for server scans
  Webshield used to detect and clean viruses on
  in-bound and out-bound mail gateways

5
At KUMC (continued)

• VirusScan is distributed using Novells ZenWorks
  to install
• DAT file upgrades are done through activating the
  Auto Upgrade feature (once a week) and pointing
  it to a KUMC distribution server
• Standards set by KUMC Information Resources
  staff
• Helpful sites nai.com, symantec.com

6
KUMC and ILOVEYOU

• Fewer than 30 cases of the ILOVEYOU virus were
  reported at KUMC.  
• Because this particular virus was not spread
  through GroupWise, overall impact on the email
  system was minimal.  

7
KUMC and ILOVEYOU

• Actions
• posted virus warning on KUMC's security web site
• broadcast an email message to warn users about
  the virus
• Programmed the email gateways to block messages
  based on subject line
• Installed new McAfee extra.dat file on the email
  gateways
• Pushed extra.dat file to users via ZenWorks

8
KUMC and ILOVEYOU

• Actions (continued)
• Made extra.dat file available on KUMC's software
  download site
• Broadcast additional warnings about
  similar/copycat viruses
• Linked to Symantec's "fixlove.exe" information
  from security web site
• Emailed fixlove.exe program and instructions to
  users and eventually incorporated it into each
  users login script
• Cleaned infected workstations and servers
• Restored damaged files from backups
•  

9
Whats next at KUMC?

• McAfee mixed reviews
• Recognize the importance of a single standardized
  software solution
• Currently have anti-virus software out for bid

10
Items to cover

• What products are used?
• How much do these products cost?
• Does your campus site license (if you have one)
  include home installation?
• Aside from deployment on the desktops, where else
  is anti-virus software installed and actively
  scanning?

11
Items to cover (continued)

• How are virus file updates distributed to the
  desktops?
• Who sets standards (and what are users
  expectations) about deployment, support, and
  response at each campus?
• What sites are most helpful to go to for
  information and virus fixes?
• What were the effects of the recent "ILOVEYOU"
  virus (and all its variants) at your campus?