Friday 18th July 2008  

Important: DNS Security Advisory

 

Purpose:   Alert ICT Teams to Recent Security Exploit on DNS Systems

Audience: School ICT Teams & Technicians

 

PLEASE ENSURE THIS INFORMATION IS PASSED ON TO YOUR ICT TEAM AS SOON AS POSSIBLE.

 

• WHERE SCHOOLS HAVE SCHEDULED TECHNICAL VISITS WITH EDUCATION ICT SERVICE, YOUR TECHNICIAN WILL CARRY OUT THE NECESSARY UPDATE ON THEIR NEXT VISIT
• SCHOOLS WITH FILE SERVER SUPPORT FROM EDUCATION ICT SERVICE WILL HAVE THEIR SERVERS UPDATED AUTOMATICALLY, HOWEVER THE SCHOOL RETAINS RESPONSIBILITY FOR ENSURING WORKSTATIONS ARE UPDATED
• SCHOOLS WHO DO NOT TAKE EITHER OF THESE SERVICES FROM EDUCATION ICT SERVICE, WILL NEED TO ALERT THEIR ICT TECHNICIAN TO ACTION

 

Please note a new vulnerability has come to light that has the potential to be exploited worldwide.

In summary, the exploits allow “cache poisoning” whereby false host information can be introduced into a caching nameserver. This can cause your PCs and Laptops to contact incorrect, and possibly malicious hosts for particular services. Consequently, web traffic, email, and other important network data can be redirected to systems under the attacker's control.

 

Solution:

Ensure your systems are patched with latest updates from your operating system vendor or support provider. Note please this vulnerability affects not only Microsoft based operating systems so ALL systems should be checked. Please take note of the currently available advisories:

 

For full information on this vulnerability, and for links to affected vendor product responses, please visit CERT at http://www.kb.cert.org/vuls/id/800113

 

Microsoft’s bulletin contains links to the relevant patches for Windows systems; PC’s and Laptops will require the DNS Client update, whilst servers will require both DNS Client and DNS Server updates applying: http://www.microsoft.com/technet/security/bulletin/ms08-037.mspx

 

 

Protex Caching and Filtering

 

Purpose:   Information regarding new improvements to Internet access for schools

Audience: Leadership Teams + ICT Teams

 

Cambridgeshire County Council has secured funding to roll-out local Protex Web Filtering and Caching solutions to all Primary schools. This will improve the performance of your Internet access as well as Web Filtering.

 

Secondary schools will also be receiving an upgrade to the latest Protex software

 

Timings for this are yet to be confirmed but the upgrades will start to take place from September onwards.

 

There are a number of benefits to the new system, including but not limited to:

 

1.       Per user logging of websites visited

2.       Schedule download of sites prior to teaching to improve performance

3.       School can select what to block and unblock

4.       Selectively ban users from using Internet

5.       General improvement in bandwidth utilisation

 

More information will follow once we have firmer delivery times.

 

 

  

Training Opportunities for September 2008 onwards

 

Purpose:    New Training Opportunities for the new Academic Year

Audience:  Headteacher, Teachers and Administrative Staff in Schools

 

Please find the link below to the new ICT Service training Schedule for September 2008.

 

Download the full training course schedule

 

Full details of each Training Course is available on the Education Portal at www.ict.ccceducation.net  

 

Please note we are unable to accept bookings over the phone. You may call to check course detail and space availability on telephone 01480 376670 or email: ict.courses@cambridgeshire.gov.uk , unfortunately no places can be provisionally booked.

 

A printed copy of the Training brochure will be available to schools in September 2008.  Should you require a copy prior to the new school year, please contact us as above.  

 

HelpLines Newsletter

 

Purpose:    Information about the latest issue

Audience:  All appropriate staff in Cambridgeshire schools 

 

The July issue of HelpLines has now been sent out to schools via the courier bag.

 

You can download an electronic version here: July

 

Cambridgeshire Online Training Search 

 

Cambridgeshire Online Training Search (COTS) is a database of training opportunities provided by the Local Authority.  It can be accessed from any computer connected to the Internet without the need for a password; its powerful search engine will help you to find suitable courses.  Eventually, all providers will be using this database, please check the Providers list for the services currently represented.  You will already find the complete listing of courses offered by CAS, CREDS, SLS, Education ICT Service, ISSIS, Cambridgeshire Youth Work and Connexions.  Go to: COTS to access this service now.

 

ICT Service Blog and Helpline Blog

 

The information in this briefing is also available through our blog. This means that you do not have to wait for the fortnightly distribution; news items go online immediately. Other relevant information about ICT is posted there too.  It is also possible to use the blog to comment on items and to give us feedback.

 

There is a link to the blog from our website or you can visit it directly at http://educationictservice.blogspot.com/  If you use a newsreader such as Google Reader, you can subscribe to the blog using the link in the left-hand column; your news reader will automatically highlight new blog items for you. If you would like to learn how to do this, contact the Helpline.

 

For up to the minute Helpline information, please visit the ICT Service Helplines Blog by searching for Resource id: 3750 from the Education Portal or by using this link: ICT Service Helplines Blog. You can subscribe to this blog in exactly the same way. 

 

More ICT News on the Portal...

 

Do you regularly check the ICT News page on the Portal? It features all the latest ICT-related news of importance to Cambridgeshire's schools.

To take a look, simply search for resource ID: 584 from the Portal front page, or click on 'News' on the ICT Service home page (www.ict.ccceducation.net).