[Eril-l] IP blocks - more of a problem for EZ Proxy than WAM proxy?

Mon Dec 19 08:48:06 PST 2016

Is this a problem limited to EZ Proxy, or do the WAM proxiers among us need to worry as well?

We almost never run into IP blocks by vendors, but maybe it’s because we’re a small institution and not super well-known, and thus flying under the radar.

BTW we are having so many problems with WAM proxy that I think we’ll be forced to move to EZ Proxy at some point.  If security is an issue, we’ll have to take that into account.

Diane Westerfield, Electronic Resources & Serials Librarian
Tutt Library, Colorado College
diane.westerfield at coloradocollege.edu<mailto:diane.westerfield at coloradocollege.edu>
(719) 389-6661

From: Eril-l [mailto:eril-l-bounces at lists.eril-l.org] On Behalf Of Heather Shipman
Sent: Friday, December 16, 2016 12:26 PM
To: eril-l at lists.eril-l.org
Subject: Re: [Eril-l] APS IP Block solutions?

If switching to Shibboleth, make sure that your IT configures it for anonymous authentication. Shibboleth isn’t anonymous by default; it will pass identifying information to vendors if not configured properly. If your university’s Shib configuration is controlled outside the library, they may not realize that’s a problem.

[Thumbnail2]
Heather Shipman
E-resources Acquisition Specialist
110 Olin Library, Cornell University

From: Eril-l [mailto:eril-l-bounces at lists.eril-l.org] On Behalf Of Deziel, Bryan G.
Sent: Friday, December 16, 2016 11:40 AM
To: Susan Wiegand <swiegand at saintmarys.edu<mailto:swiegand at saintmarys.edu>>; Alice Daugherty <adaugher at lsu.edu<mailto:adaugher at lsu.edu>>
Cc: eril-l at lists.eril-l.org<mailto:eril-l at lists.eril-l.org>
Subject: Re: [Eril-l] APS IP Block solutions?

This is interesting as I was just having a discussion with someone about the need to move away from IP authentication.  We have begun experimenting with leveraging Shibboleth for certain resources such as IEEE Xplore.

-Bryan

Bryan G. Deziel, MLIS
Discovery and Digital Resources Librarian
Argonne Research Library,
Argonne National Laboratory
bdeziel at anl.gov<mailto:bdeziel at anl.gov>
(630) 252-3876

[Description: Description: Please consider the environment before printing]

From: Eril-l [mailto:eril-l-bounces at lists.eril-l.org] On Behalf Of Susan Wiegand
Sent: Friday, December 16, 2016 10:35 AM
To: Alice Daugherty <adaugher at lsu.edu<mailto:adaugher at lsu.edu>>
Cc: eril-l at lists.eril-l.org<mailto:eril-l at lists.eril-l.org>
Subject: Re: [Eril-l] APS IP Block solutions?

I think NISO is working on something to improve security: "It is about time that libraries and publishers move beyond IP-based authentication. A related effort begun within the STM Association<http://r20.rs6.net/tn.jsp?f=001s1yuqKmHYZmwyvy5fqlYSlpD929PdlIp67jjNN4MT-SVpFE7mT2gl1ZlK0qdTJps1LL1rbSh8PZ2oUjR1EAw1gHqXeSuWbp8hXGSzBIoxy3RKlsbyNyds1ZRN9W6YCVAT1L5VzAgRxdD0xZGLOaxHnge7ASImV4dzmqSDrY91PEMGZImylE2xpY9c7l-e4Cb94e00MzjLmP0dJBk_oxTHhTvq0lnvsSxVUTjuZ46KqQtVSY1QqORD0XgLxTjpNbz&c=oL64PbSI-vm44PdFZnc_3EHQzoU7JjXtPnpJC4zMNMYsApwrO7Ut7g==&ch=6bA6JPJmQEWdb4pTEml00-eGyjCsGXS1LZdxmp2UOMUNMfJTQCvhhA==> of publishers earlier this year is gaining momentum, and NISO has been engaged in these conversations and is supporting the initiative." (from their Dec. newsletter: http://www.niso.org/publications/newsline/2016/newslinedecember2016.html. There's a survey to gain insight into issues and experiences, etc.
Should be an interesting coming discussion. What do others think about moving beyond IP?
Sue

Sue Wiegand
Periodicals Librarian
123 Cushwa-Leighton Library
Saint Mary's College
Notre Dame, IN 46556
574.284.4789

On Fri, Dec 16, 2016 at 11:04 AM, Alice Daugherty <adaugher at lsu.edu<mailto:adaugher at lsu.edu>> wrote:
Hello all,

In the past we have had the occasional IP block from ACS with the IP unfortunately being our EZProxy IP.  Lately, this has been a recurring issue, and not always the same user.

Recently, one person brought their computer to our IT people and no viruses were found.  We were thinking that a keystroke virus might have been the culprit.  Currently, a different user is causing our IP block and has caused the last 3 blocks.

This year, it seems that the excessive downloads block has occurred more frequently and with other vendors as well.

I wondered how other campuses are handing this issue?  How many attempts at password changes do you provide users before you consider taking away their access?  Do you ever consider restricting their access?  Are there other technologies that can be put in place to prevent these types of breaches?

Thank you,
Alice

[LSU]<http://www.lsu.edu/>
Alice Daugherty
Collection Assessment and Analysis Librarian
LSU Libraries
Louisiana State University
30 Middleton, Baton Rouge, LA  70803
office 225-578-7652
adaugher at lsu.edu<mailto:adaugher at lsu.edu> | lsu.edu<http://www.lsu.edu/> | lib.lsu.edu<http://lib.lsu.edu/>
[Facebook]<http://www.facebook.com/LSULibraries>  [Twitter] <http://www.twitter.com/lsulibraries>   [Instagram] <http://www.instagram.com/lsulibraries>

_______________________________________________
Eril-l mailing list
Eril-l at lists.eril-l.org<mailto:Eril-l at lists.eril-l.org>
http://lists.eril-l.org/listinfo.cgi/eril-l-eril-l.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20161219/52f0892f/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 2094 bytes
Desc: image001.jpg
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20161219/52f0892f/attachment.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.gif
Type: image/gif
Size: 566 bytes
Desc: image002.gif
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20161219/52f0892f/attachment.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 334 bytes
Desc: image003.png
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20161219/52f0892f/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.png
Type: image/png
Size: 205 bytes
Desc: image004.png
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20161219/52f0892f/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.png
Type: image/png
Size: 333 bytes
Desc: image005.png
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20161219/52f0892f/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image006.png
Type: image/png
Size: 291 bytes
Desc: image006.png
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20161219/52f0892f/attachment-0003.png>