<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#0033CC;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1030765171;
mso-list-type:hybrid;
mso-list-template-ids:-671476104 67698705 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-text:"%1\)";
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">On behalf of Matt Rahr, CALS CCT:</span><span style="font-size:10.0pt;color:#0033CC"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#0033CC"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif"> Hodsacad [<a href="mailto:hodsacad-bounces@list.cals.arizona.edu">mailto:hodsacad-bounces@list.cals.arizona.edu</a>]
<b>On Behalf Of </b>Rahr, Matt - (rahr)<br>
<b>Sent:</b> Tuesday, January 27, 2015 7:33 PM<br>
<b>To:</b> <a href="mailto:hodsacad@list.cals.arizona.edu">hodsacad@list.cals.arizona.edu</a>;
<a href="mailto:expstations@list.cals.arizona.edu">expstations@list.cals.arizona.edu</a>; Antin, Parker B - (pba); Burgess, Shane C - (shaneburgess); Ratje, Jeffrey M - (jmratje); Silvertooth, Jeffrey C - (silverto); Winzerling, Joy J - (jwinzerl)<br>
<b>Subject:</b> [Hodsacad] Recent Crackdown on IT Security<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:#1F497D">Hello Everyone,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">The University’s Information Security Office (ISO) is responsible for securing our UA network and IT infrastructure. While they do not directly administer servers and firewalls, they rely on network monitoring
and logging tools to analyze large amounts of network traffic, looking for nefarious activity.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Last week, our office (CCT) received several requests from the ISO to contact specific members in CALS and request they change their UA NetID password. In a few instances, the ISO disabled the account immediately,
locking the user out of email, VPN, and anything else a UA NetID is required for access. The ISO was worried these users’ passwords had been stolen or given unknowingly through phishing emails, etc and was allowing unauthorized access to the University network
and the user’s personal information.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">I was concerned with this practice because one of our users had her account immediately disabled while traveling out of the country, and I was suspicious the account was erroneously flagged. As you can imagine,
it is difficult to contact someone abroad who cannot access their email. Plus, changing/resetting a NetID password can be a hassle. I brought this to the attention of the ISO and after clarification, learned that there was very strong evidence that this particular
user’s NetID was compromised (her traffic was being routed through a Chinese network proxy). In general, the ISO office will take a second/third look at each case before auto-disabling a UA NetID account. I’m told they have “95%+ confirmation” before disabling.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="color:#1F497D">Please pass on these tips to your faculty and staff:<o:p></o:p></span></b></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo2"><![if !supportLists]><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><span style="mso-list:Ignore">1)<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">If your faculty or staff find themselves unable to log into VPN, OWA, desktop/phone email client, and/or UAccess, have them call the 24/7 help desk
(520-621-HELP) and ask them to check the status of their UA NetID. If the account has been disabled, 24/7 will unlock the account through verbal verification steps.<o:p></o:p></span></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo2"><![if !supportLists]><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><span style="mso-list:Ignore">2)<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">If your faculty or staff will be traveling out of state, please have them close their email clients at home and work. This will not trigger an automatic
disabling, but it may put them on the ISO’s radar, as it may appear that the user is logging in from two different places at the same/near time.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">The ISO plans to aggressively tackle compromised UA NetIDs, and I expect we’ll be dealing with flagged users on a regular basis. However, if you have faculty or staff that do travel a lot and need to be whitelisted,
this may be possible with the Information Security Office. Please email them at <a href="mailto:ISO-UAIS@email.arizona.edu">
ISO-UAIS@email.arizona.edu</a> and cc <a href="mailto:lab@cals.arizona.edu">lab@cals.arizona.edu</a>.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="color:#1F497D">Upcoming Seminar<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="color:#1F497D">Andy Honaman (IT Manager, SNRE), Tod Gregoire (CCT) and I will be hosting a demo on UA NetID+. NetID+ requires users to use a second method of authentication (called two-factor authentication) before accessing
an online resource. This prevents anyone but you from accessing applications and services secured with NetID+, even if they know your password.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">The ISO and UITS have announced that NetID+ will be required for certain online resources, such as VPN and Outlook Web Access (OWA) sometime this year. We want to make sure you and your faculty and staff know
your options. I’m already enrolled in NetID+ and it’s pretty easy, way easier than dealing with your NetID being compromised or your account being flagged/disabled. If you want to learn more about it, check out
<a href="https://webauth.arizona.edu/netid-plus/pages/faq/">https://webauth.arizona.edu/netid-plus/pages/faq/</a> and
<a href="https://webauth.arizona.edu/netid-plus/pages/tutorials">https://webauth.arizona.edu/netid-plus/pages/tutorials</a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">The demo will be in Marley 230 sometime in February, and probably another one in March. I’ll post the dates and the tips above in the CALS Bulletin once I get the dates nailed down.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Thanks,<br>
Matt <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#7F7F7F">Matt Rahr</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#7F7F7F">Director, CALS Communications and Cyber Technologies (CCT)</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#7F7F7F">Email, Network & IT Security –</span><span style="font-size:10.0pt;color:black">
</span><span style="color:#1F497D"><a href="mailto:lab@cals.arizona.edu"><span style="font-size:10.0pt">lab@cals.arizona.edu</span></a></span><span style="font-size:10.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#7F7F7F">Programming & Web Development -
</span><span style="color:#1F497D"><a href="mailto:webdev@cals.arizona.edu" target="_blank"><span style="font-size:10.0pt">webdev@cals.arizona.edu</span></a></span><span style="font-size:10.0pt;color:black">
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#7F7F7F">Video Production & Classroom Tech –</span><span style="font-size:10.0pt;color:black">
</span><span style="color:#1F497D"><a href="mailto:video@cals.arizona.edu"><span style="font-size:10.0pt">video@cals.arizona.edu</span></a></span><span style="font-size:10.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#7F7F7F">More Information Online -</span><span style="font-size:10.0pt;color:black">
</span><span style="color:#1F497D"><a href="http://cct.cals.arizona.edu/"><span style="font-size:10.0pt">http://cct.cals.arizona.edu</span></a></span><span style="font-size:10.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#7F7F7F">520-626-0329</span><span style="font-size:10.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>