The University of Vermont

Enterprise Technology Services

Security enhancements on schedule for January 5

Release Date: 12-23-2003

Contact Information:
Author: Dean Jay Williams
Email: Dean.Williams@uvm.edu
Phone: 802/656-1174 Fax: 656-0872 or 656-8148

Do you use CRT, FTP Voyager, WS_FTP, Better Telnet, or Fetch?  


Starting Monday January 5, 2004, all access from off campus to servers and host computers provided by Computing and Information Technology (CIT) will require software that encrypts -- securely scrambles -- all communication over the Internet.  This requirement applies when you are using a dial-up, DSL, or cable modem service to connect to zoo.uvm.edu for terminal sessions (most  commonly, to use pine for email) and for file transfer (such as  publishing Web pages and saving files on your Zoo.uvm.edu account).  This security enhancement was announced over two years ago, and was deferred from July 2003 to January 2004 to give everyone additional time to prepare. 

This article explains how to meet the security requirement.

How to work with the security requirement

If you use a computer off campus, here are the secure ways of connecting to CIT-provided servers that will be required starting January 5.  Most people have already switched to secure software, which has been available on the UVM software download site for many months.  

Windows Users

   
Old Software Secure Software
telnet
CRT
QVT Terminal

ssh Secure Shell
FTP Voyager
WS_FTP
WE_FTP_LE

ssh Secure Shell


  Macintosh Users

   
Old Software Secure Software
Better telnet
NCSA telnet

Terminal/ssh
Fetch

Fugu

   

The required secure software programs are available free-of-charge in the UVM software download site, http://www.uvm.edu/software/.  The old software listed above will not work from off campus starting January 5.  

In situations where insecure ftp (or, less likely, telnet) programs must be used, the encryption requirement can be met by using VPN (virtual private network) software, which is also available from the software download site.  The VPN provides, in effect, an on-campus connection. 

What This Requirement Does Not Cover

There is no change in how to access most services.  All of the following are unchanged:

  • Access from a computer on the UVM campus network to any computer or server on campus or off campus
  • Access from off campus to UVM servers provided by departments other than CIT
  • Email programs (other than pine)
  • Web pages (including webmail.uvm.edu and webct.uvm.edu)
  • Some access to administrative information systems
  • Dial-in access to the UVM modem pool

What's Next

  • Email access from off campus will require encryption at a later date. Virtually everyone will have to make some minor configuration changes; some may have to switch to new email software.  CIT will announce resources to help you configure your email software.
  • Access from off campus to servers not provided by CIT will require encryption
  • Access from on campus will require encryption

Questions


For more information, please see UVM's network security Web site:

  http://www.uvm.edu/networksecurity/

Please direct any questions about software use to the Computing Help Line, helpline@uvm.edu or 656-2604.  

Contact UVM © 2009 The University of Vermont - Burlington, VT 05405 - (802) 656-3131