1. Where can I find the slides that were presented on this subject?

Please see Unsupported OS Remediation Phases 2 and 3.

2. When will an unsupported OS be blocked from using the network?

The enforcement will be done in phases:

3. How will the blocks be performed?

• Servers will have their MAC address added to a block list and they will also be added to a quarantine network

• Workstations will have their MAC addressed added to a block list, preventing the use of both wired and wireless networks

  • There will also be tools in place to block machines using rotating or private MAC addresses.

  Assets with Cortex installed will be blocked through the application, and users will see a popup notification on their screen.

  Assets without Cortex will be blocked via MAC address, but there will be no on-screen notification on the endpoint at this time.

4. Will BYOD devices be part of the blocks?

No, BYOD devices will not be in GOIS’s asset inventory, so they will not be part of the blocks.

5. How do I request an exception so I am not blocked?

Refer to the Unsupported OS Exceptions page on the Global Security Dashboard.

6. How do I buy extended support for my operating system?

The vendor for the Operating System, or in some cases a third party, often times allow you to purchase extended security update support.

• CentOS: ~$42.50 per server. Licenses can be purchased on TuxCare via the TCM process
• Red Hat Enterprise Linux: ~ $632 per server. Licenses can be purchased with Vendor Management.
  • However, if the start date for the ELS isn’t July 1, a two-year purchase is required, bringing the cost to $1,264 per license.
  • Once licenses are purchased, reach out to NYU IT via [email protected] for onboarding to the Red Hat Satellite Server.
• Windows Server 2012: $224.73 per 16 cores. Licenses need to be purchased through Microsoft, and keys can be obtained from GovConnect. GOIS does not have specific contacts yet but is working on getting them.

<aside> 💡

Email [email protected] if you have any questions around the license procurement process

</aside>

7. How do I view my list of assets that will be blocked if I don’t take appropriate action?

The Unsupported OS page on the Global Security Dashboard (GSD) provides a list.