1. Where can I find the slides that were presented on this subject?

2. When will an unsupported OS be blocked from using the network?

The enforcement will be done in phases:

2025-01-29 at 14.36.37 Screenshot from 2025-01 Security Liaisons Meeting.pdf@2x.png

Servers will have their MAC address added to a block list and they will also be added to a quarantine network
Workstations will have their MAC addressed added to a block list, preventing the use of both wired and wireless networks
- There will also be tools in place to block machines using rotating or private MAC addresses.
Assets with Cortex installed will be blocked through the application, and users will see a popup notification on their screen.

Assets without Cortex will be blocked via MAC address, but there will be no on-screen notification on the endpoint at this time.

No, BYOD devices will not be in GOIS’s asset inventory, so they will not be part of the blocks.

Refer to the Unsupported OS Exceptions page on the Global Security Dashboard.

The vendor for the Operating System, or in some cases a third party, often times allow you to purchase extended security update support.

<aside> 💡

</aside>

CentOS: ~$42.50 per server. Licenses can be purchased on TuxCare via the TCM process
Red Hat Enterprise Linux: ~ $632 per server. Licenses can be purchased with Vendor Management.
- However, if the start date for the ELS isn’t July 1, a two-year purchase is required, bringing the cost to $1,264 per license.
- Once licenses are purchased, reach out to NYU IT via [email protected] for onboarding to the Red Hat Satellite Server.
Windows Server 2012: $224.73 per 16 cores. Licenses need to be purchased through Microsoft, and keys can be obtained from GovConnect. GOIS does not have specific contacts yet but is working on getting them.

<aside> 💡

Email [email protected] if you have any questions around the license procurement process

</aside>