Log4shell Vulnerability Update

The threat from the "Log4jshell" vulnerability is ongoing, with new exploits discovered since the holiday break. ITS has made the decision to keep firewall blocks in place due to the ongoing security risks.  ITS will open these systems to the outside world on a case-by-case basis after verifying that they pose no threats to the Mines network. We anticipate that most business-critical systems will be cleared by the start of classes on January 11th and complete restoration may take several weeks.

---

ITS strongly recommends connecting to the VPN when accessing Mines-related services.
VPNs and Global Protect Knowledge Base (KB) Article

Do you manage a server or service that you would like to make accessible without the VPN?
Please submit a Firewall Whitelist or Change Request

For a list of services that have been reviewed or are actively being reviewed:
Firewall Status List for Mines Applications KB Article (login required)

For the latest information regarding tools and patches:
Log4j Critical Vulnerability KB Article