Appendix IV: ITC and HS/CS Services that Can Be
Leveraged to Secure Devices

Your guide to existing U.Va. resources and services that can help you secure your IT environment.

Single-user PC and Mac Systems Services

DCI Program

The Desktop Computing Initiative is a voluntary, university-wide program designed to curb the total cost of owning computers and to increase the efficiency and effectiveness of support for personal computing at the University.

Cost for the Dell DCI Standard Desktop with Windows 98: $1,179. Other models and prices available. Details

Premium Desktop Service

The Premium Desktop Service is a customizable, modular, and secure Windows NT 4.0 desktop with a standard suite of software and basic applications.

Cost: $5 - $100, one-time software licenses (depending on software selected) Details

Site-licensed Software Related To Security

ITC's Software Central site contains software licensed for use by faculty, staff, and students. There is no charge to download and install this software. Security related software includes Norton Anti-virus (virus protection), SecureCRT (secure Telnet connections), and (Spring 2001) SecureFX (secure FTP file transfer). Details

HS/CS Desktop Management

HS/CS employs Microsoft System Management Server (SMS) to deliver more timely and consistent desktop support. Capabilities include automated inventory, software and anti-virus distribution, and remote control by Help Desk staff. Service is free to hospital departments. Details

Server Services

Premium Server Service

The Premium Server Service offers space on an NT file server to departments. The Service provides departments with shared workspace and provides individuals with their own secure directories.

Cost: $125/yr for each Gb of storage Details

Micro Systems Department Server Support

The ITC Departmental Micro Systems Support program provides operating system support, file system backups and operational support for department-owned Microsoft Windows NT 4 and Windows 2000 servers.

Cost: $2,050/yr for systems up to 50Gb storage, with backup Details

Departmental Unix Systems Support Program

The ITC Departmental Unix Systems Support program provides operating systems support, file system backups, and operational support for department-owned Sun, IBM RS/6000, SGI, and Intel-Linux Red Hat 6.2 servers.

Cost: $1,500/yr for systems up to 50Gb storage, with backup. Additional systems are $1,000 with backup. Details

HS/CS File and Print ("Super Server") Services

HS/CS offers centrally maintained server services for hospital departments. For details, contact the HS/CS Help Desk at 924-5334.

Departmental Security Services for All Hardware Platforms

The following additional services and information services provided by ITC and HS/CS are relevant to all hardware platforms:

Security Best Practices

ITC maintains a web site of current information on security best practices and known vulnerabilities.

Virus Alerts

HS/CS and ITC staffs jointly monitor virus activity and post virus alerts on the University and ITC home pages and selected mail lists.

ITC's Virus Hot Topics page provides a comprehensive review: Web site for HS/CS virus protection also provides information.

Points of Contact for Computer Security Problems

Faculty, staff, and students can report computer security problems by calling the ITC Help Desk (924-3731) or sending e-mail to abuse@virginia.edu or consult@virginia.edu. Health system employees can contact the HS/CS Help Desk (924-5334) or send e-mail to helpdesk@hscmail.mcc.virginia.edu.

Departmental Planning and Outreach

ITC's Departmental Computing Support group consults with departments to assess technology needs, help develop a technology plan, and assist with the implementation of the plan.

Local Support Partner (LSP) and Local Support Associate (LSA) Programs

These two programs help departmental computing support staff gain skills and knowledge necessary to provide effective technical support for their departments.

The LSP Program is an alliance between ITC and computing professionals serving departments throughout the University and is part of ITC's Departmental Computing Support Program. Through certification-directed training, high-level access to ITC resources and services, and regular liaison activities, Local Support Partners are provided with important tools to help them be more successful in their departmental computing roles. Details

The LSA Program is designed to provide front-line technical support staff with knowledge of the University of Virginia's computing environment, so they can provide effective computing support within their department. Details

HS/CS Client Services Meeting

HS/CS hosts periodic meetings to exchange information with department computing support staff. For more information, contact Richard Shelley, HS/CS client services manager, at 924-8292 or ras2m@virginia.edu.

UVa Security Scanning

ITC provides a free service to scan computers for known security vulnerabilities and produce a report for the user or department. The service uses Internet Security system's Internet Scanner, which locates vulnerabilities like an intruder would - by examining a network's devices, services, and interrelationships. Internet Scanner provides detailed information about the vulnerabilities found, including the vulnerable host, a description of the vulnerability, and the steps to take to eliminate the vulnerability. Information on requesting a scan.

Information on Hardware and Software Firewalls

Under certain circumstances, hardware firewalls can be used to increase security of critical servers. Information about the use of hardware firewalls at the University.

Several commercial software firewalls are available to increase security on individual computers. However, their ease of use and potential benefits vary. An ITC review of some of these products.

© 2008 by the Rector and Visitors of the University of Virginia.

The information contained on the University of Virginia’s Department of Information Technology and Communication (ITC) website is provided as a public service with the understanding that ITC makes no representations or warranties, either expressed or implied, concerning the accuracy, completeness, reliability or suitability of the information, including warrantees of title, non-infringement of copyright or patent rights of others. These pages are expected to represent the University of Virginia community and the State of Virginia in a professional manner in accordance with the University of Virginia’s Computing Policies.