IT Services Network Group
The University of Colorado Denver is concerned about unwanted intrusion by hackers using the shared networks of VPN (DSL & Cable Modem) access into our network. Due to this concern the UCD Information Systems Department is implementing a policy that requires all users wanting to penetrate the UCD Firewall, to have installed on your home PC or Macintosh system some type of Personal Firewall and Virus Protection software before we will allow you to gain access to the campus network via a VPN.
The UCD IT Services Department will support the use of a software package called ZoneAlarm Personal Firewall for the PC and Doorstop for the Macintosh. Instructions for getting this software and installing it is below. You may purchase or use any software package that is available but due to limited resources we will only support the, free, personal use version of ZoneAlarm and the Doorstop versions for the MAC.
For virus protection, the University has purchased licenses for all faculty and staff to use the McAfee ViruScan software and this will be provided and supported by UCD IT Services Department.
Both of these software packages can be obtained from the UCD Help Desk by calling (303) 724-HELP (303-724-4357) and picking up a CD for home installations.
There are no "freeware" versions of Macintosh firewall protections. DoorStop Personal Firewall runs $59 and has been given the highest rating. Find more information on Macintosh firewall software at: http://www2.opendoor.com/doorstop/
DoorStopPersonalPricing.html.
Instructions for installing and configuring the Zone Alarm Firewall for PC's:
- The Zone Alarm firewall is a simple personal firewall protection software that allows users the safety of "alarms" when/if someone tries to access your home pc to telnet or FTP into your machine to gain access to UCD resources
- First you must install the software by running the program "zonalarm.exe" via a download from http://www.zdnet.com/downloads/partners/zonealarm/
download.html or in the directory d:\Zone Alarm\zonalarm.exe or whichever drive your CD ROM is assigned to on the CD provided by UCD Help Desk - We recommend that users respond with the "default" answers to any of the questions asked
During the install:
- The first screen is the "Welcome" screen, just click on the "next" button
- The second screen you will see an "Important Information!" screen, and again press "next"
- The third screen will ask for your name, company and email address with check mark boxes for registration and updates. Please enter your name, UCDas company and your email address then and press "next". The registration buttons are options you can decide whether or not you wish to register and/or be notified of upgrades
- The fourth screen is the "License Agreement". Press the "accept" button
- The fifth screen is the "Select Destination Directory" screen. The default is fine, but if you wish to install the software in another directory, choose it now, then press "next"
- The sixth screen is the "Ready To Install" screen and here, just press "next"
- The screen that comes up next is the "User Survey" screen
- Here you must select the connection you are using. Since we are requiring it for DSL and Cable Modem, please select one of these two options
- Your use of ZoneAlarm should be for "personal use"
- The last two do not apply as they are for business use
- Now press "finish"
- Your final screen is the "Installation Complete!" screen. Here press "finish"
After the initial installation the software will ask you some questions regarding your systems initial setup. These questions will relate to programs or system files that run either during the initial load of Windows or when you attempt to launch a program. The message will be in a screen box that will be headed with ZoneAlarm and have a question associated with it like:
- Do you want to allows Netscape Communicator to access the Internet?
- There should also be a "check box" at the bottom that states:
- remember the answer each time I use this program.
Naturally, you would want the system to remember to allow software like Netscape, Internet Explorer, Microsoft Outlook, etc. to run each time you use it.
The main purpose of this system is to "alert" you when or if there is an attempt to FTP, Telnet or run a Trojan application on your system to "hack" into your computer and thus into the campus network.
By default, the system will lock these attempts out and will show you the IP number of the person attempting to access your machine.