Over the past year, we have put many new IT protocols and safeguards in place to protect UMD accounts and data, as many of us continue to work remotely. We must continue to improve these systems to ensure the safety of our data over the long term. As a result, we are implementing a new security requirement: FireEye Endpoint Security must be installed and used on all university-owned Windows and Mac computers by June 30, 2021. Select high-security areas have earlier deadlines. FireEye is a next-generation virus and threat detection and response platform. In an early installation on UMD computers, it detected and helped prevent what was likely a major attempt to ransomware computers at UMD.
-
If your computer is administered by campus or unit IT staff, they will install FireEye. To date, FireEye has been installed on over 6,500 UMD-owned computers. If you are unsure who administers your computer, check with your unit IT staff.
-
If you administer a UMD-owned computer, you can install FireEye by downloading it from TERPware (Windows and Mac). Unfortunately, our FireEye license does not allow it to be installed on personally-owned computers.
Finally, here are a few simple reminders that can help you keep the university safe from data security threats:
-
Think about who can see your screen or use your keyboard. Regardless of whether you are working at UMD or at home, try to place your computer monitor so people walking by can’t see what is on your screen. Also, remember to lock your computer when you leave your work area even for a brief time. On Windows, typing <windows key> + L locks your system. On a Mac, typing Command + Control + Q will lock your system.
-
Continue to be alert for fake email appearing to be from your boss or other UMD leaders (spear phishing). If you receive an email that claims to be from someone at UMD but it is not sent from an @umd.edu email address, do not click on any links in the email, do not respond, and forward a copy to spam@umd.edu. There has been a significant increase in fake email claiming to be a COVID-19 vaccine registration site and then asking for personal information.
-
Keep your work and personal information separate. To the extent possible, do not use personally-owned computers for UMD-related activities. When working from home, if you must use a personally-owned computer for UMD business, store all your files on your UMD Google Drive or Box account, not on your computer. Also talk to your unit IT staff about virtual desktop options instead of using your personal computer for UMD business.
We all need to work together to protect UMD’s data, which enhances security for us all. If you have any questions or need IT assistance, please contact the IT Service Desk.