The need to keep your computer security patches and anti-virus software up to date was clearly demonstrated in last month’s onslaughts by the Blaster worm and SoBig.F virus. While those two and other recent high-visibility attacks were aimed at Windows NT, 2000 and XP systems, the Lab’s Computer Protection Program also sent out a stream of vulnerability alerts for users of some UNIX and Linux systems.

And just as the UNIX Systems group has established a monthly cyber security support service for UNIX systems, the Mac/PC Support Group is now offering a similar service for Windows users. Called an SLA, or Service Level Agreement, the service is designed to help individual users of Windows NT, 2000 and XP systems keep their computer safe against a growing number of malicious and destructive computer worms and viruses. The cost is $25 per system per month.

This service is being offered on a one-year trial basis starting in October 2003. During this period the cost of the service and the effort required to support the customer base will be evaluated.

Pre-SLA requirements

• The customer’s machine will be brought up to current service pack and patch levels and the latest version of Norton Antivirus Software will be installed and charged on a time and material basis (if required)
• A data backup strategy will be strongly recommended, if not already implemented.

What’s included?

The SLA includes:

• All critical operating system patches required to secure the system will be researched, installed and verified.
• The Norton Antivirus product will be “managed” by a central service that will push signature file updates on an as-needed basis (eliminating the need for the user to perform manual updates or once-a-week scheduled updates from the Symantec Web site). Mac/PC Support Group (MPSG) staff will monitor all managed clients using a central console and proactively take action whenever a problem is observed.
• MPSG will fix any security problem identified by Computer Protection Program (CPP) scans or those caused by a virus or worm that attacks before the patch or antivirus software can protect the system. MPSG will also work with the CPP to ensure the system regains network access if it was blocked at any point during the security incident. (Note: Full recovery from a catastrophic incident requires that data be backed up). All work will be documented with Help Desk tickets and the customer will be notified with the results of any work done on his or her behalf.

How to Sign up

• Identify a Project ID that can be automatically charged each month.
• Call the Help Desk at x4357 or enter a Web help request and follow the Request Help link to Create Help Request.
• Ask that your system be put on a Windows Security SLA.