Complete Care Program
DataBP Continuous Data Protection

Making Networks Work.

Firewall Management

    A Note From the Help Desk: Dell SonicWall SRA Vulnerabilities in Managed SRA and SMA Devices

    ATTENTION NETWORK SERVICES MANAGED CLIENTS

    Dell SonicWall SRA Vulnerabilities in Managed SRA and SMA Devices

    Today it was announced that there are three vulnerabilities with the SonicWall Secure Remote Access and the Secure Mobile Access devices.  These vulnerabilities can cause unauthorized information disclosure, modification and/or disruption of service. While these vulnerabilities are potentially serious, we do not have any indication that managed client SRA/SMA units have been compromised.

    SonicWall has released a maintenance release of firmware(8.1.0.7) to patch these vulnerabilities.

     

    What Are We Doing?

    Due to the severity of this issue, we will be applying the patch this evening. This will begin at 7pm and will continue overnight until complete. Our team will be opening tickets to track the work, we expect the firmware update to take approximately 30 minutes. If you would like a specific time schedule to perform the upgrade, please contact us as soon as possible, we will accommodate special scheduling requests on a first come, first serve basis.

    For further information, please see the links below:

    Vulnerability Summary for CVE-2016-9682

    Vulnerability Summary for CVE-2016-9683

    Vulnerability Summary for CVE-2016-9684

    Thank you,

    Questions?

    Email the Help Desk

    Awakon Federal Credit Union Completes Network Upgrade

    Located In Onaway, Michigan, Awakon Federal Credit Union recently completed a full network upgrade under the direction of the CU*Answers Network Services teams. This upgrade allows Awakon Federal Credit Union to keep their equipment and solutions current and is part of the overall technology plan at the credit union.

    CU*Answers Network Services also provides the credit union with its Complete Care IT management program that includes firewall monitoring and management, server monitoring and management, backup and business continuity services, managed endpoint security and patch management. This partnership allows CU*Answers to assist the credit union with these ongoing tasks so the IT department can work on credit union projects and member initiatives.

    “CU*Answers Network Services are a vital piece of my IT team at the credit union. They help fill in with monitoring and oversight in areas that I would have to work 24 hours per day if I were doing it myself,” says Jason Freel, Vice President of Information Systems with Awakon Federal Credit Union. “Because they specialize in credit unions, their focus is specific to the areas of security and compliance, areas in which credit union IT departments should be well versed, but often lack internal expertise.”

    For more information, visit the CU*Answers website.

    A Note From the Help Desk: CISCO Network Equipment Hardware Advisory

    ATTENTION ONLINE, SELF-PROCESSING, AND NETWORK SERVICES MANAGED CLIENTS

    CISCO Network Equipment Hardware Advisory

    Cisco has released a hardware advisory for a clock signal component used in some of their equipment which could result in failure of the device after approximately 18 months of operation.

    For the CU*BASE client networks, devices primarily affected by this advisory include the Cisco 4300 routers. Cisco has announced other equipment may be affected as well (see link above for details).

    An equipment failure may result in your Credit Union being unable to reach CU*BASE or other data processing services without emergency assistance by us to reconfigure your network.

     

    What Are We Doing?

    We are working closely with Cisco to identify equipment within our managed networks that are affected by this defect. We are also developing a process with Cisco to replace affected equipment for devices under management.

    We believe that there is no immediate likelihood of hardware failure based on the purchase date of the equipment in question.

    What You Need To Do:

    If your router is affected and is managed by CU*Answers Network Services, we will coordinate the replacement process under our existing management agreement. We will reach out to you to start the warranty replacement process in the coming weeks.

    If we do not manage your router, you should carefully review Cisco’s notice and determine if you have any equipment in your network that is affected. Cisco is requiring that equipment be under SmartNet warranty to be eligible for replacement.

    PLEASE NOTE: If you do not have a management agreement, we strongly recommend you contact CU*Answers Network Services or Cisco for options

    Questions?

    Email the Help Desk

    A Note From the Help Desk: Microsoft delayed security patches for February 2017

    ATTENTION NETWORK SERVICES MANAGED CLIENTS

    Microsoft delayed security patches for February 2017

    Microsoft has delayed the release of security patches for February 2017. Below is an excerpt from Microsoft’s announcement:

    “Microsoft has discovered a last minute issue that could impact customers and was not resolved in time for the planned updates today. Currently, there’s no expected time of arrival.  This covers patching for all Microsoft products.”

     

    What Are We Doing?

    As soon as Microsoft releases its February patches, we will provide you with another announcement and begin our normal patch process.

    When We Are Doing It?

    Timing is unknown. Once Microsoft releases an updated timeline for the February patches, we will update our timeline.

    What You Need To Do:

    This issue does not require any action on your part.

    Questions?

    Email the Help Desk

    CU*Answers Network Services Attends Inaugural NCU-ISAO Cybersecurity Conference

    AdvantageCIO, a virtual CIO consulting service of CU*Answers, announced today it attended the inaugural National Credit Union Information Sharing & Analysis Organization (NCU-ISAO) user conference held at the Kennedy Space Center in Cape Canaveral, Florida from Jan. 31 – Feb. 2. The NCU-ISAO is a credit union specific cybersecurity information sharing organization recently formed as a mechanism to allow credit unions to share cybersecurity threats and gain intelligence concerning bad actors and fraudulent activities taking place in cyberspace. Additionally, the group provides its members cyber resilience operational guidance and cyber resilience education.

    “Credit unions ought to set the gold standard when it comes to collaboration,” explains David Wordhouse, CU*Answers VP Network Technologies, “So I’m excited to see where this group goes and how it can help improve the industry’s cybersecurity posture in a way that respects limited budgets and resources. Ultimately we need to move beyond just sharing cybersecurity information and get to the point we intentionally act on what we know and what we learn every day.” AdvantageCIO offers a suite of services to assist credit unions in understanding their technology and leveraging it to effectively act on and repel cyber threats.

    The NCU-ISAO group has a technical framework for sharing cybersecurity threat indicators automatically with credit unions. Interested credit unions should contact the ISAO directly at www.ncuisao.org.

    Don’t Forget! A 2017 Project for Your IT Team: Changes to GOLD Device IDs

    ATTENTION ONLINE AND SELF-PROCESSING CREDIT UNIONS

    CU*Answers is pleased to announce that we will be establishing a new naming method for CU*BASE GOLD IDs in 2017.

    What’s changing?

    Expanding CU*BASE device names has become necessary due to the growing number and size of credit unions in our network.  This new, 7-digit format, will include:

    • The CU ID
    • The Branch Location
    • The Device Type
    • The Sequence Number

    What does your Credit Union need to do?

    CU*Answers will be working with your credit union to prepare for this conversion process.  When a credit union’s device names are changed, every device must be updated at the same time.  This means someone must log in and perform a simple procedure on every one of your CU*BASE workstations.  We will be communicating with your branch staff to ensure that workstation configurations are properly implemented.

    For a list of the steps required to implement this new 7-digit format, as well as visual guides for how these changes will display on your workstations, please refer to the Device Conversion Instructions.

    When will this process begin?

    We will be converting groups of credit unions each week, starting February 6, and will reach out to your credit union ahead of your scheduled conversion date.

    The conversion schedule has been posted to AnswerBook, and we will continue to update it as the conversion process moves forward.

     

    *NOTE: If your credit union converted to CU*BASE after March of 2013, you are already using the 7-digit naming convention, and there is no need to implement the changes detailed above.

    A Note From the Help Desk: Action Required

    ATTENTION DATA PROCESSING COORDINATORS

    ACTION REQUIRED: Client Firewall Maintenance

    What Are We Doing?

    CU*Answers is verifying that all credit unions have proper redundant VPN connections to our high availability site in Yankton, South Dakota.  We have noted that the CU*Answers data processing router at your credit union may not be communicating properly with our high availability site, and need you to take the following action:

    What You Need To Do:

    We need your assistance in ensuring traffic from the CU*Answers router has unrestricted network access to and from the following IP address: 67.130.171.34.

    This access needs to be in place by 3/1/2017 in order to ensure you will have uninterrupted access to GOLD during a rollover or failover event.

    Our next scheduled rollover event is March 12th – 15th.

    Please verify that the CU*Answers data processing router has unrestricted access through your firewall to and from the 67.130.171.34 address.

    If you wish to restrict access to specific ports, the following are required both inbound and outbound from the above IP address:

    IPSec
    ESP
    AH
    IKE
    IKEv2
    ISAKMP
    GRE

    Why We Need Your Assistance:

    This will allow your site to reach our Yankton high availability site during rollover events.

    When This Needs to be Completed:

    This task needs to be completed by Wednesday, 3/1/2017.

    Questions?

    Email the Help Desk

    A Note From the Help Desk: Action Required

    ATTENTION DATA PROCESSING COORDINATORS

    ACTION REQUIRED: Client Firewall Maintenance

    What Are We Doing?

    CU*Answers is verifying that all credit unions have proper redundant VPN connections to our high availability site in Yankton, South Dakota.  We have noted that the CU*Answers data processing router at your credit union may not be communicating properly with our high availability site, and need you to take the following action:

    What You Need To Do:

    We need your assistance in ensuring traffic from the CU*Answers router has unrestricted network access to and from the following IP address: 67.130.171.34.

    This access needs to be in place by 3/1/2017 in order to ensure you will have uninterrupted access to GOLD during a rollover or failover event.

    Our next scheduled rollover event is March 12th – 15th.

    Please verify that the CU*Answers data processing router has unrestricted access through your firewall to and from the 67.130.171.34 address.

    If you wish to restrict access to specific ports, the following are required both inbound and outbound from the above IP address:

    IPSec
    ESP
    AH
    IKE
    IKEv2
    ISAKMP
    GRE

    Why We Need Your Assistance:

    This will allow your site to reach our Yankton high availability site during rollover events.

    When This Needs to be Completed:

    This task needs to be completed by Wednesday, 3/1/2017.

    Questions?

    Email the Help Desk

    A 2017 Project for Your IT Team: Changes to GOLD Device IDs

    ATTENTION ONLINE AND SELF-PROCESSING CREDIT UNIONS

    CU*Answers is pleased to announce that we will be establishing a new naming method for CU*BASE GOLD IDs in 2017.

    What’s changing?

    Expanding CU*BASE device names has become necessary due to the growing number and size of credit unions in our network.  This new, 7-digit format, will include:

    • The CU ID
    • The Branch Location
    • The Device Type
    • The Sequence Number

    What does your Credit Union need to do?

    CU*Answers will be working with your credit union to prepare for this conversion process.  When a credit union’s device names are changed, every device must be updated at the same time.  This means someone must log in and perform a simple procedure on every one of your CU*BASE workstations.  We will be communicating with your branch staff to ensure that workstation configurations are properly implemented.

    For a list of the steps required to implement this new 7-digit format, as well as visual guides for how these changes will display on your workstations, please refer to the Device Conversion Instructions.

    When will this process begin?

    We will be converting groups of credit unions each week, starting February 6, and will reach out to your credit union ahead of your scheduled conversion date.

    The conversion schedule has been posted to AnswerBook, and we will continue to update it as the conversion process moves forward.

     

    *NOTE: If your credit union converted to CU*BASE after March of 2013, you are already using the 7-digit naming convention, and there is no need to implement the changes detailed above.

    A Note From the Help Desk: SonicWALL Global Management System Maintenance

    ATTENTION NETWORK SERVICES FIREWALL MANAGEMENT CLIENTS

    SonicWALL Global Management System Maintenance Scheduled

    What Are We Doing?

    Network Services will be applying a patch to the SonicWALL Global Management System.

    Why We Are Doing It?

    We are doing the upgrade to stay current with vendor releases.

    When We Are Doing It?

    The upgrade will be deployed beginning 10 PM on Wednesday, January 4, ending Thursday, January 5 at 3 AM ET. We expect the work to take approximately five hours to complete.

    How This Work Will Impact You:

    During the maintenance period, all log collection will be paused. This will be reflected on your reports as no data will be summarized during the maintenance period.

    What You Need To Do:

    As a client, you will not need to take any action. Please also understand this maintenance does not interrupt the security services running on the firewalls in any way.

    Questions?

    Email the Help Desk

    CU*Answers Network Services is a full-service network technology solutions provider. We specialize in LAN/WAN design, implementation and management; network security; firewall management; IP telephony VOIP (voice-over-Internet protocol) solutions; records management; managed hosting solutions (facilities management), compliance and security audits (HIPAA/GLBA/SOX); high availability solutions; web site engineering, and hardware sales and support services. CU*Answers Network Services provides services to the education, retail, legal, medical, real estate, hospitality, and financial services industries as well as court systems and regional municipalities. Our financial services portfolio includes servicing over 150 credit unions across the country.

    Why CU*Answers Network Services?

    • Nationwide Network Reach: 24/7 real-time monitoring and management of thousands of devices and hundreds of networks across the U.S.
    • Compliance Expertise: policy development, implementation, and consulting for highly regulated industries
    • Proven high availability solutions for critical applications: hosted or on-premise
    • Custom, secure web application development by certified experts
    • Multiple state-of-the-art data centers
    More than just a service provider, we're an extension of your staff with the expertise to cut through the confusion and deliver the solutions you need at a price you can afford. Rest assured that if our team can deliver to the exacting standards required by highly regulated industries, CU*Answers Network Services can meet your needs too.
    www.cuasterisk.com | Phone: 616.285.5711 | Toll Free: 800.327.3478 x167 | Fax: 616.285.5735