SCS VPN Service Changes

On Monday, November 22nd, a configuration change was made to the SCS VPN services. The split tunneling feature, that routed only traffic to CMU over the SCS VPN service, was removed. Now, all traffic is routed over the SCS VPN service. This change was done to help reduce the risk from network sniffing tools such as the recently announced Firesheep exploit.

For more information on the Firesheep exploit please see:

http://www.cmu.edu/computing/news/security/2010/oct/102910plugin.html

We recommend that users continue to use either the legacy SCS IPsec based VPN or the newly announced SCS Anyconnect VPN service when connecting from either Carnegie Mellon's wireless network or any public wireless network.

The SCS AnyConnect VPN software and instructions can be downloaded from the SCS Help pages at:

http://www.cs.cmu.edu/~help/networking/vpn/anyconnect/anyconnect.html

Please contact the SCS Help Desk at x8-4231 or send mail to help+@cs.cmu.edu with any questions or concerns regarding this change to the SCS VPN services.

Thank you for your attention,

SCS Help Desk