Re: Laptop Security

["Christianson, Lorrayne K." <lori_c () STTHOMAS EDU>]

I am looking for information on how other universities handle patching laptops that are only on campus during the day, 
or even rarely? As our patching is done overnight, we are looking for solutions for reaching these assets. We use 
Altiris to push our patches.

Thanks!

Lori Christianson
Associate Director-Client Services
University of Saint Thomas
2115 Summit Ave.
Saint Paul, MN 55105
(651) 962-6286
lori_c () stthomas edu


Don't take the bait!  IRT will never ask you for your username and password via email. Phishing e-mails attempt to 
deceive the recipient into giving up private information in a response to a message or by leading the recipient to a 
fraudulent Web site.  Learn more about phishing here.




-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Tupker, 
Mike
Sent: Friday, November 21, 2008 9:13 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Laptop Security

We provide a Sonicwall SSL vpn portal for personal computer remote access (we've disabled the vpn capabilities for home 
users). Remote access on the sonciwall is limited to OWA and intranet, some file shares, and terminal services for 
everything else. Employees that have been given campus owned laptops can use a vpn client to connect back to the 
network.

Patch management on all our campus computers is done with a combination of active directory GPO deployment and WSUS.

Mike Tupker
Systems Administrator
Mount Mercy College
Office: (319) 363-1323 x1401
Mobile: (319) 538-1644
If you need assistance with an computer issue please contact the helpdesk at x4357 or http://help.mtmercy.edu.

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Sabo, 
Eric
Sent: Friday, November 21, 2008 6:37 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Laptop Security

We are wondering how everyone handle security on their laptops.

Topics like:
        Patch Management on the laptop
        How do you handle access to network resources (file/email/database) - Do you make them use an VPN client?
        Do you allow them to store data on their laptop?
        Do you use any type of policies for these users?


We are looking for suggestions and ideas.

Thanks in advanced,
Eric Sabo
Senior Windows Systems Engineer
Department of Computing Systems
California University of Pennsylvania