ResNet - Quarantine Site Allowed Websites

When ResNet determines that a computer has been infected with a virus which compromises the ResNet network, the computer is moved from the main VLAN to a quarantine VLAN. In the quarantine VLAN the user has access to several websites and domains containing tools to remove malicious software from the computer. You can verify that a user has been placed in quarantine here: https://novastats.resnet.wisc.edu/helpdesk/.

Below is the current list of websites and domains that can be accessed while in ResNet quarantine.

DoIT Sites

  • doit.wisc.edu

Trojan/Spyware Detector Sites

  • hijackfree.com
  • emsisoft.com

Spybot Download

  • kujoe.com
  • kolla.de

McAffee

  • mcafee.com

Trend

  • trendmicro.com

Apple Updates

  • apple.com

SAV updates

  • symantec.com
  • symantecliveupdate.com

Windows Update

  • akamai.com
  • akamai.net
  • microsoft.com
  • msft.com
  • nsatc.com
  • windows.com

ZoneAlarm download

  • ls-servers.com

Verisign (for SAV)

  • verisign.com

Please note that HTTPS traffic from the quarantine/NetReg network is allowed no matter what its destination. Since both Windows Update and Symantec Live Update use some form of HTTPS, the decision was made to allow all HTTPS rather than creating and attempting to maintain a list of "safe" HTTPS IP Addresses.




Keywords:resnet quarantine site allowed websites virus deactivate deactivation internet blackhole domain domains website quarentined   Doc ID:3963
Owner:Mike C.Group:UW Housing
Created:2005-08-22 19:00 CDTUpdated:2013-06-10 09:50 CDT
Sites:DoIT Help Desk, UW Housing
Feedback:  2   3