U.Va. Student Residence Hall Network Firewall

[Nov 23, 2009 14:09] Web access to Microsoft Live@edu accounts now works.

ITC has noticed a continual increase in the volume and severity of computer security problems in student residence areas over the past few years. These problems range from simple cases of computers infected with email viruses to student computers that have been hacked by remote Internet attackers who exploit weaknesses in operating systems. In some cases, hacked student computers are used to try to hack other systems on the Internet. Other cases have involved using students' machines for illegal distribution of copyrighted materials such as software applications, computer games, videos, and music. In other cases, hard disks are wiped clean resulting in the loss of important work. Any security problem on your computer is likely to be a significant drain on your time even if your files are not deleted. Computers often must be completely reloaded from the manufacturer's CDs to prevent a hacker from returning; and there are questions of liability if your computer is used for illegal distribution of copyrighted materials.

Network Protection in the Residence Halls

In order to help decrease the number of security incidents on student computers in the residence halls, ITC has installed a network firewall between the dorm networks and the Internet. A firewall works by preventing remote Internet users from making inbound connections to your computer while at the same time allowing you to connect to any remote site on the Internet. The firewall technology that we use works very well and we have found that most computer users are unable to tell if their computer is located behind a firewall or not. However, there are some computer applications that will not work properly when run on computers that are located behind a firewall. Some audio and videoconferencing programs will not work correctly or may be limited in that some of their features will not work. You will not be able to host a multi-player computer game that serves off-Grounds' players from behind the firewall. For a more complete description of firewalls and applications, please see the U.Va. More Secure network website. We are leveraging the technology we developed for the the main campus network security project to help protect student computers located in housing facilities as well.

The firewall is located between the student residence hall networks and the Internet. The firewall does not protect network traffic to and from other residence hall computers. Likewise, the firewall does not protect network traffic going between residence hall computers and computers located in other university buildings. The firewall has no effect on network (Internet) performance. Computers not protected by the firewall are subject to the same Network Capacity Management as those that are protected.

We do understand that a small number of students will need to run applications that will not work properly when located behind the firewall. We have developed an opt-out solution for students with special needs so that they can move their computers out from behind the firewall. We strongly encourage all students to leave their computer located behind the firewall if at all possible.

Follow this link if you must move your computer out from behind the firewall. >>

Please remember that the firewall only adds some protection for your computer. It is still critical that you keep your anti-virus software up-to-date and that PC users run Windows Update on a frequent basis. ITC has a site license for Symantec (Norton) Antivirus. You can download it from ITC's Software Central and use it at no cost for as long as you remain a student or employee of U.Va.

© 2009 by the Rector and Visitors of the University of Virginia.

The information contained on the University of Virginia’s Department of Information Technology and Communication (ITC) website is provided as a public service with the understanding that ITC makes no representations or warranties, either expressed or implied, concerning the accuracy, completeness, reliability or suitability of the information, including warrantees of title, non-infringement of copyright or patent rights of others. These pages are expected to represent the University of Virginia community and the State of Virginia in a professional manner in accordance with the University of Virginia’s Computing Policies.