MSS for unpatched Windows

Campus security contacts,

After a suspension of several months, SNS is now fully
staffed and ready 
to resume enforcement of the campus Minimum Security
Standards for 
Networked Devices (MSS) for unpatched Windows hosts and
Windows hosts 
with blank admin passwords. Beginning Tuesday, March 13, we
will ramp up 
our operations by beginning with campus hard-wired non-DHCP
Ethernet 
hosts and dial-up modem hosts, then later add AirBears, VPN,
and 
DHCP-based hosts over the next few months.

The sequence of messages will be as follows: After an
initial 
notification of non-compliance with the MSS, if no response
is received 
within 5 working days, and if no active compromise or other
security 
risk is noted, a second notice will be sent 2 working days
before active 
blocking begins. The list of blocked IP addresses and SNS
tracking 
numbers is available on this SNS web page:

   http://sec-info.berkeley.edu/cgi-bin/blockinfo-login.pl

If you have any questions about the MSS or this notice,
please write to 
the securityberkeley.edu address.

Karl Grose
IST-SNS


------------------------------------------------------------
------------
The following was automatically added to this message by the
list server:

For information about Micronet, including subscribing to
or unsubscribing from its mailing list and finding out
about upcoming meetings, please visit the Micronet Web
site:
<http://micronet.be
rkeley.edu/>.