Secure Access

Maintaining secure access to our systems is of the utmost importance to the Computing and Communications Center (CCC). For this reason, there is a new, more restrictive policy for computer usage and access.

Telnet, FTP, and Modem Bank Phased Out...

For many years TELNET and FTP were staples at WPI; TELNET being used for login access and FTP for file transfers to CCC systems. Neither of these protocols encrypt passwords or other data that is transferred. Previously this left sensitive password information vulnerable and our systems susceptible to attack. The modem bank relied on these insecure protocols as well. The ability to connect to CCC systems (such as ccc.wpi.edu or mcteer.wpi.edu) using TELNET, FTP or the WPI Modem Bank has been discontinued.

Server Information
SSH	ccc.wpi.edu
SCP	ccc.wpi.edu
SFTP	ccc.wpi.edu

Secure SHell (SSH) protocol has replaced the telnet protocol.
Secure CoPy (SCP) and Secure File Transfer (SFTP) have replaced FTP.
WPI no longer provides direct access via dial-up modem, and users are urged to sign up with a local Internet Service Provider to access WPI systems via the Internet.

SSH (Secure SHell)

SSH (Secure SHell) is a program to log into another computer over a network, to execute commands on a remote machine, and to move files from one machine to another. It provides strong authentication and secure communications over insecure channels. It is intended as a replacement for telnet, rlogin, rsh, and rcp. SSH clients encrypt passwords and provide a higher level of security than telnet connections. The most noticeable difference when using SSH is that the client prompts for the password prior to making the connection. This enables the client to encrypt the password before passing it over the network to the target system.

The WPI CCC is exploring various SSH clients in order to determine a candidate that we can support. Below is a list of the clients we are currently testing. Please feel free to contact the Helpdesk with any input you may have about any of these clients.

Clients

TeraTerm is a freeware SSH client.
SSH Secure Shell for Workstations is a commercially authored SSH client that is free to University users.
PuTTy is an open source SSH client.

SCP (Secure CoPy)

SCP is a secure replacement for the more common FTP (File Transfer Protocol) application. SCP (Secure CoPy) is a protocol for transferring files to or from a remote host. It uses SSH as the low-level communications protocol and therefore benefits from the security present in SSH. Unlike previous FTP connections, all SCP connections should now be made to the server: ccc.wpi.edu.

WPI CCC is testing the use of the following SCP clients:

Clients

WinSCP is a freeware Secure Copy client.
SSH Secure Shell for Workstations has an integrated SCP tool. As mentioned above, this is a commercially authored tool that is available at no cost to University users.

ISPs (Internet Service Providers)

As the WPI CCC modem bank was incapable of using the secure protocols mentioned above, it was decommissioned on August 1st, 2003. An Internet Service Provider (ISP) will be required to gain access to the WPI network in lieu of the CCC modems.

Internet Service Providers allow users to gain access to the Internet and various Internet resources from their home using either existing phone or cable technology in the home.

Most cable companies provide Internet access options to their customers through the use of a cable modem which connects directly into a standard network card and uses new or existing cable lines to provide high-bandwidth (high-speed) access to the Internet.

Likewise, many telephone companies offer DSL (Digital Subscriber Line) options to their customers. DSL uses your existing phone line to provide high-bandwidth (high-speed) access to the Internet.

Helpdesk has compiled a listing of local Internet Service Providers for your convenience. To find an Internet Service Provider in your area, try using the Find An ISP web site. When using an ISP from off-campus, use of the WPI Virtual Private Network (VPN) client is recommended. The VPN provides off-campus users with secure encrypted access to WPI's Extranet, allowing users to access most campus networking resources while off-campus.

Maintained by itweb.
Last modified: Nov 22, 2005, 15:44 EST