Security Recommendations June 2005: Personal Firewalls

Due to the increasing possibility of spyware intrusion, identity theft and other malware infections, the VCU Computer Security Incident Response Team recommends that all Windows based personal computers being used by VCU faculty, staff and students run Windows XP with Service Pack 2 since this version of the Windows operating system with the latest service pack is currently the most secure.

It is also recommended that all personal computers when connected to the VCU network or when being used at home abide by the following safety precautions:

I. Use AntiVirus Protection

All personal computers connected to the VCU network including home machines owned by VCU faculty, staff and students must be running anti-virus software with virus signatures files kept up-to-date. VCU site licenses Symantec AntiVirus products and makes available the Symantec AntiVirus (SAV) Managed Client that can be downloaded to all VCU owned machines and machines owned by VCU faculty, staff and students. The SAV Managed Client automates the delivery of virus signature definition updates, which makes it easier for the end user to keep antivirus protection up-to-date. The SAV Managed Client is available for download.

II. Install a Personal Firewall

Depending upon your situation, there are two options for installing a personal firewall:

1. Symantec Client Security
   If you have technical support, you are urged to contact your administrator to arrange the installation of the Symantec Client Security software, which is site licensed by VCU for installation on VCU personal computers at no cost. This software package, which integrates anti-virus, a personal firewall and intrusion detection, requires technical support for installation and configuration. For this reason, it is only being distributed to VCU technical support personnel who will then provide installation, configuration and support for their users. If you do not have technical support, you are urged to follow the recommendation in the second option below.
2. Windows XP SP2 Personal Firewall
   If you cannot use Symantec Client Security, the next best protection is to install and enable the personal firewall that is included with Windows XP SP2. This firewall is not as full featured as Symantec Client Security specified in the first option above; however, it will prevent attacks from successfully penetrating a system. Please check the following web page for information on how to install and configure the Windows XP SP2 Firewall.