
University Computing Services
YES!
You need a FIREWALL
on your desktop computer! ... Didn't
anyone tell you? Your desktop pc is very
vulnerable without one, and You too are responsible
for keeping hackers away from your network.
Get
ZoneAlarm free! Anyone can install it easily.
Critical
MS Windows update patches are imperative.
Recovery
tips. If you have a disaster that damages your
desktop pc, what will you do? Have a plan now!
Tips
to Fight Spam.
Spam
Report Card 2004. |
|
|
|
Want
to warn everyone you know about the latest Virus
Warning you recieved on email today?!
...
Before you do, please look up the email (search
on a few selected keywords) to be sure it
isn't a hoax or a virus. Be smart, do
BE the virus, by forwarding the bogus email
to everyone in YOUR address book! |
|
|
|
|
Ask the Network
Tech:
How can I secure my wireless home network?
The
following is provided as information ONLY.
UCS and FSU do not support routers installed by non-UCS employees.
Remember, wireless routers are NOT allowed in dorms.
Here are 5 quick steps
to help you secure your wireless network from unauthorized access. These
steps are provided as general guidelines - for detailed help, please contact
your hardware vendor.
1. Download the latest firmware for your device.
2. Change the administrator password.
3. Change your SSID and turn off SSID Broadcasting
4. Enable WEP
5. Limit access by MAC addresses
1. Download the latest firmware for your wireless router.
Firmware is software that's embedded in a hardware device - in this case,
your wireless router. The firmware that comes with your wireless router
or
wireless access point may be out of date. Download the latest firmware
to
ensure the best security and performance.
As security vulnerabilities are discovered, patches to stop them are
developed. These patches are often included in firmware updates. If you're
using the default firmware that came with your wireless router, there
could
be several known security holes that could allow someone to hijack your
Internet connection, view the files on each of your networked computers
and
even steal passwords or credit card numbers.
Most of today's wireless routers allow for firmware updates, and the process
is quite simple. Check the web site for your wireless device manufacturer
for instructions on obtaining the latest firmware and how to install it.
2. Change the administrator password
Your
wireless router's default password should be changed immediately. All
wireless routers are shipped with the same administrator user name and
password. If you have any trouble changing this setting, check your wireless
router's user guide.
3. Change your SSID and turn of SSID Broadcasting
Your wireless router comes with a default SSID (Wireless Network Name),
and
one of the first things you should do is change that SSID. By having a
non-default SSID, you're making it harder for unauthorized connections
to
your network.
By allowing your SSID to broadcast, you make it easy to add additional
devices to your wireless network. However, you also make it easy for anyone
with a wireless device to gain access to your network.
When you turn SSID broadcasting off, your wireless devices will have to
be
configured with the exact SSID that you have specified in your wireless
router.
4. Enable WEP
WEP encrypts data both to and from your wireless clients, making it harder
for others to peek in on what you're doing. WEP should be enabled, and
ideally you should use the strongest key possible, which is usually 128-bit.
5. Limit access by MAC addresses
Every
network card, both wired and wireless, has a unique address assigned
to it from the manufacturer. This identifier is called a MAC address.
By
setting your wireless router to only allow connections from specific MAC
addresses, you're greatly improving the security of your wireless network.
Once you know each of the MAC addresses for your network cards, check
the
support Web site of your wireless router manufacturer for instructions
on
using MAC address security.
For help figuring out what your network card's MAC address is:
(for Windows
95/98/98SE/ME)
Click the Start button, and select Run. In the space provided, enter
winipcfg and click OK.
Select your network card from the drop down list.
Your MAC address will be displayed in the Adapter Address field and your
IP
address will be displayed in the IP Address field.
(for Windows NT/2000/XP)
Click the Start button, and select Run. In the space provided, enter cmd
and
click OK.
At the command line, enter ipconfig /all.
Your MAC address will be displayed as the Physical Address and your IP
address will be displayed as the IP Address.
See
other Best Practices for you computing
sanity.
See
United States Computer Emergency Readiness Team "Securing
Wireless Networks".
|