September 25, 2003

IT news

Information Technology central modem pool services will be phased out by August 2005.

“This reflects a reduced demand for modem pool services as well as the need to reduce points of entry into Northwestern’s network because of increased security concerns,” said Tom Board, director of Technology Support Services. “Home users are also increasingly using high-speed connections that the modem pool cannot provide.”

NU modem-pool users are encouraged to look into DSL or cable modem Internet access; information is available at www.it.northwestern.edu/dsl-and-cable/. Travelers should consult NUIT recommendations at www.it.northwestern.edu/introductions/travel-modem-lite.html.

Frequent travelers who use WebMail as their main e-mail client and/or typically access e-mail from more than one computer may want to configure their e-mail software for IMAP (Internet Mail Access Protocol).

“IMAP makes sense for anyone who accesses mail from more than one computer on a regular basis,” said Tom Board, director of IT Technology Support Services. “This might include faculty who travel frequently and use WebMail as a main mail client, or students who may not own computers and access their e-mail from University computing labs.”

By default, Northwestern’s e-mail system uses POP (Post Office Protocol). E-mail software configured for POP downloads mail off the host server to an individual’s computer (such as when the “Check Mail” command is used in Eudora).

With IMAP, e-mail remains on the server and the user can determine which messages will be downloaded or deleted.

Unlike POP, however, IMAP allows users to create and manipulate folders or mailboxes on the servers; view message headers, subject lines and senders; and search for messages by keyword.

“If you’re using a POP client and are satisfied with it, there’s no need to switch,” Board said. “We’re making IMAP available for those members of the community who need it, especially those who travel.”

All University-supported e-mail applications can be configured for either POP or IMAP. Each user can determine which protocol is appropriate for his/her needs.

IT has implemented SSL (Secure Sockets Layer) encryption technology on its main e-mail servers to create a more secure e-mail environment.

“Implementing SSL brings us in line with current practices for security on the Internet,” said Tom Board, director of Tech-nology Support Services. “Our users are so mobile that we must now protect against security problems on provider networks around the world. The most common e-mail clients have options for SSL and we are moving to capitalize on the availability of this proven technology.”

SSL is being implemented in place of Kerberos password encryption software and plain-text password processing. Although Kerberos has been used for some time at North-western and is an effective network security tool, SSL’s superior features prompted its implementation by IT.

SSL encrypts passwords, making them extremely difficult to decode. Currently, e-mail messages and the passwords used to access them are transmitted in plain or “clear” text, which make them vulnerable to “sniffing” by anyone interested in breaking into the Northwestern network.

To help ease the transition for the University community, Information Technology is phasing out Kerberos and Kerberized POP (Post Office Protocol) over the next 12-15 months, as well as plain-text password processing. As part of the process, NUNet account holders may need to upgrade their e-mail software to assure compatibility with SSL.

IT has announced a new data network price model to encourage schools and divisions to remove existing hublet devices.

Hublets are a security risk, hamper effective network management, and have recently been ordered removed from the infrastructure (see “Policy Restatement and Enforcement Plan for Unapproved Campus Network Extensions,” dated June 2003, at the IT policy Web site at www.it.northwestern.edu/policies/).

As a special incentive, IT will reduce the cost of the additional Ethernet ports from $230 each to $150 each for any quantity when specifically ordered for replace hublets.

Information Technology no longer acts as the central agent providing pager servicesto the Northwestern community.

“We feel the University community will be better served by each department working directly with a vendor to obtain these services,” said Tom Board, director of IT Technology Support Services.

To facilitate the transition, IT worked with the pager vendor, Arch Wireless, to send invoices for current pager services directly to the department of record.

Departments had the choice of retaining Arch Wireless as their pager vendor, or choosing another vendor.

Board noted that there are benefits for departments who choose to remain with Arch Wireless, including:

• Elimination of administrative charges means a lower base monthly cost for pagers.

• University departments will still be eligible for corporate rates from Arch Wireless.

• Dealing directly with the vendor means a quicker turnaround time for pager replacement.