While we try to help in as many ways that we can, we can not guarantee that your computer is totally secure. But if you have further questions on this topic, feel free visit your local help desk, call us or contact us by email. Email is the least effective way to troubleshoot computer problems. Appointments is most effective way to correct problems because you have a technician in front of your computer to look over the problem and answer all your questions so you can learn how what  you may not know about your computer. Phone conversations can help point you to self help information and answer easy questions. See our Contact Us page to find your local ResCom locations or how you can contact us by phone.

The first thing you can do to be sure that your computer is safe and secure is to install and frequently update a good antivirus program. Every student using a connection in the residence halls is responsible to keep "their" computer virus free. Bandwidth violations will not be reversed because you have obtained a virus. Please learn how to maintain anti-virus software on "your" computer.

Penn State purchased a site license from Symantec Corporation, the makers of Norton Antivirus, to give you a free corporate version anti-virus program. This software can be downloaded (with PSU userid / password) from ITS. If you're unsure of what to do, you can contact your local  ResCom help desk for help. This program can be installed and configure by appointment.

Obtaining the software is only the first step. It is only effective if it is always running and kept up to date. If properly configured, the Symantec Antivirus Client will automatically update at least once a week. But if your version is extremely out of date, you can manually update it (need instructions?) You need to open the program to click on Live Update. This will update to the  latest version of definition files. if you think something might be wrong make an appointment with your local ResCom desk for help.

Keeping Windows patched with the latest critical updates is extremely important.  These patches close vulnerability holes that viruses take advantage of. Microsoft frequently releases critical updates that help eliminate security risks in your software. But they can only help if you install them.

Windows XP has a feature built in called “Automatic Updating” that will go and retrieve these updates for you, however Automatic Updating doesn't always complete properly. Sometimes they want to load drivers that you should download from the manufacturer. Always go to the manufacturer to install drivers for devices in your machine. i.e. video drivers, sound card drivers, TV cards etc. Microsoft device drivers can cause problems with your equipment. Vendors were invited to participate when the OS was created but after XP was released the manufacturer has the responsibility to provide the most up to date device drivers.

ResCom recommends that you manually go to the Windows Update website to update your Microsoft Critical updates. You may want to install "recommended patches" that are listed but that is your choice. Always install the critical updates. They may require rebooting and going back to the site several times until it says there are no more critical updates to perform.

This past year Microsoft also released Service Pack 1 for Windows XP which contains numerous security updates and patches for your operating system. It is one of the critical updates you need to install. ResCom can answer questions about this process and help you get them installed by appointment.

A lot of people consider having a password on their computer to be a bother. Without a password on your XP computer the person in the next room can attach to your computer and use your bandwidth. XP home is especially vulnerable to this by default. A hacker or virus relies on your unprotected computer to get information or propagate information to other computers. Hackers are after personal information, financial info, and an internet connection to use at their will. In the residence hall, when they use your ports to go download files or hack other computers your bandwidth goes up and you are liable for damages done through your port. Using passwords on every account on your computer is essential.

Microsoft has these recommendations for creating a “strong password”:

• It should be at least 7 characters long, the longer, the better
• Try to use UPPER case and lower case letters, as well as other symbols and numbers
• Has at least one symbol character in the second through sixth position
• Use at least four different characters (don't repeat letters/numbers)
• It should look like a random sequence of letters and numbers

Here is what Microsoft says to NOT do when creating a password:

• Don't use ANY PART of your logon name for your password
• Don't use any actual word or name in ANY language
• Don't use numbers in place of similar letters
• Don't reuse any portion of your old password
• Don't use consecutive letters or numbers like "abcdefg" or "234567"
• Don't use adjacent keys on your keyboard like "qwerty"

Microsoft also recommends changing your password at least once every six months (for help on creating or changing your password, we have instructions. While you might find it nearly impossible to create a password to conform to all of these rules, that is not really the goal. Use this as a guide to get an idea of what to create. As always, with any password; don't write it down or give it to anyone. University policy prohibits sharing your ITS passwords with anyone else.

This is another option you have to secure your computer and data. First, let's define what a firewall is, and why you would need one. Consider a firewall just like a fence between neighbors. You can use the preset gate to go back and forth through the fence.  Things you don't want on your side won't get through to your side (dogs, cats, small children) without being able to access that gate. When your computer uses the internet, it uses specific "ports" to transfer data through; a firewall can block access to unnecessary ports while only allowing "specific" programs pass through the firewall. You do want to allow certain programs to access the Internet but you may not want other programs to serve data to the Internet. Example:

A firewall prevents others on the Internet from seeing and "port scanning" your computer for open ports to exploit. Critical updates can help close these vulnerabilities but a firewall will block all ports except the ones you authorize to use in order to operate your computer. As programs need to use the Internet, the firewall program will prompt you for permission to use the Internet. You can grant one time use to test or permanently allow it to use that port. If a program on your computer wants to act as a server to provide data to someone else it will also ask if you want to allow it to act as a server.

If you are not sure whether or not to allow this, then search the "Google" web site (www.google.com) for .exe program wanting permission to open the port. Properly configuring a firewall is essential to keep hackers and viruses from gaining access to your computer. You can prevent spy-ware programs from sending data back to their servers by not allowing that program to act as a server. If the world can not see your computer because you have a firewall, they will move on to someone else that has open ports to exploit.

So what is available to you? If you use Windows XP, the easiest way to protect your computer is to enable the built in Internet Connection Firewall. See instructions on how to turn it on. If you prefer something more powerful or don't have Windows XP, you can purchase or sometimes freely download a third party firewall program. Prices for these programs vary, but are usually under $50 for a good one. Programs listed are the more common programs. ResCom supports the Windows built in firewall and the Symantec firewall sold through Penn State's Computer store. If you choose to use one of the other programs to protect your computer then you will need to rely on the manufacturer for support. Even though we have knowledge on how to help you with the Symantec product we are limited in the support we can provide. 

• Symantec - Norton Personal Firewall 2002
• McAfee - McAfee.com Personal Firewall
• Zone Labs - ZoneAlarm Pro  Non-Pro version is free for personal use.
• Sygate - Sygate Personal Firewall PRO
• Zero-Knowledge Systems - Freedom Personal Firewall
• Internet Security Systems - Black Ice Defender

If you decide that you want a firewall but are unsure which one to get or set it up, make an appointment with your local ResCom desk and they will be happy to assist or answer any questions they can.

Taking initiative to do any of these steps is a good idea, but you have to follow through. That's why on a regular basis, it is best to be sure that your antivirus software is up to date. And be sure that your other software, including Windows, is also up to date. Change your password regularly. And if you choose to use a firewall, be sure that it is properly configured.

If you have more questions or concerns, a good place to start would be the Microsoft Security website. And as mentioned a few times above, your local ResCom desk will gladly answer any questions you might have or help you with any problem.