Sygate Security Agent
(The Long Version)

What is the Sygate Security Agent, and why do I want it?
The Sygate Security Agent is a personal (host based) firewall product which CSM has purchased for student, faculty and staff use. Personal firewall software provides an additional layer of security between your computer and the Internet. Firewalls are software that are designed to restrict the kinds of connections which are allowed into and out of your computer. By default, many computers ship from the factory with few if any restrictions on the kinds of Internet traffic are allowed into or out of the computer. This openness on the part of the computer ensures that the majority of the things the user attempts to do on the Internet will succeed, but it leaves the computer vulnerable to viruses and hackers who would exploit that openness. Firewalls restrict the number of possible ways into your PC. By limiting the ways in which your PC "listens" to the Internet, you limit the numbers of possible exploits which can be used to take control of your computer or steal your personal information. It is still extremely important to keep your computer patched and your antivirus software up-to-date. If you think of your computer as a building, the firewall controls which doors and windows are open (allowing things into and out of the building). Your system software patches and antivirus software are the security guard who decides what activities are allowed to happen inside the building.We have attempted to create profiles for the Sygate Security Agent which will strike a balance between security and usability. We have created Update-Only, Moderate, and High Security profiles. There is also a Power-User mode which combines some basic rules that we have created with rules that you create yourself. Finally there is a Full-Control mode which will allow you to completely create your own security profile, if you find that the ones we have created do not meet your needs. The Sygate Security Agent is compatible with any version of Microsoft Windows (95, 98, NT, 2000, 2003 or XP). While Windows XP Service Pack 2 does include a personal firewall, previous versions of Windows require additional protection. Additionally, the Windows XP firewall is a "one-size-fits-all" product. The Sygate Security Agent has a great deal more flexibility and some additional layers of protection.For the complete manufacturer supplied end-user documentation, please click here.

Installing the Agent
Click here to download the Sygate Security Agent.
**Please note, you must be using a computer on the CSM network, or connected by VPN to the CSM Campus to download this file.
After you have finished downloading the file (SSA3311L.exe) you will need to double-click it to extract the files and launch the setup utility. Follow the on-screen instructions to complete the installation.

Default configuration
Once you have installed the agent and rebooted your computer, the firewall will start up in "Update-only" mode. This means that your computer will only be able to go to the Microsoft Update site. While you are in "Update-only" mode all Internet traffic into your PC, and all traffic out to sites other than Microsoft's will be blocked. This feature is designed to give you time to update your computer with all of the latest Windows security patches. This feature is particularly useful for people with brand new computers or for people who's computers have just been rebuilt after a previous virus infestation. Without this feature an un-patched PC might fall prey to a virus before the user has time to update their computer.
**Note: If you are running Windows XP you should turn off the firewall that is built into Windows, AFTER YOU HAVE INSTALLED THE SYGATE SECURITY AGENT AND REBOOTED YOUR COMPUTER. You can do this by clicking on Start->Control Panel->Security Center->Windows Firewall.
You will see a screen that looks like this:

Using the Agent
After you are finished updating your PC, you will need to choose a different security profile. Click on your "Start" button, then choose "Programs" or "All Programs." Then click on "Sygate Security Agent." You will then see the button for the "Sygate Security Agent" program. Once you click on the "Sygate Security Agent" button, you will see a screen that looks something like this:

Go to the "Location" menu in the upper left-hand corner of the window and choose one of the other profiles, either "Moderate," "High," or "Power-User."

• Moderate is a good choice for the average user. It will allow web browsing, e-mail, and some instant-messaging. Additionally, this setting will allow all traffic to selected campus servers including but not limited to Hornet, Skyhawk, and Slate.
• High Security is a good choice if you use your computer for web browsing and e-mail only. It could also be used if you are particularly concerned about security and you do not feel comfortable customizing your own security settings.
• Power-User is a good choice for users who have a firm grasp of Internet security and who need to run additional protocols not allowed by either of the two profiles above. Power-User mode is a combination of some basic security rules that we have defined, and rules that you create. Power-User mode will allow you to control both Internet traffic and which applications are allowed access. When you choose "Power-User" mode, the firewall will initially notify you anytime a non-authorized program attempts to access the Internet. You will be given the opportunity to approve the connection. The window will look something like the one below.
  
  If you click "Yes" the connection will proceed as normal. If you click "No" the application will be prevented from accessing the Internet. There is also a check-box that says "Remember my answer, and do not ask me again for this application." Choosing that option will cause Sygate to permanently remember this decision. Note: Sygate will remember how you answered the question for the rest of your session, even if you don't check the box. After you have been using your firewall in this mode for a while, the firewall will learn to allow or disallow the programs that you typically use, and you will only see dialog boxes like the one above when something truly new happens.
• Full Control is the right choice for users with a solid understanding of Internet security and who need complete control of all their firewall rules. We strongly encourage you to read the manufacturer supplied help files which can be found under the Help menu of the Sygate Security Agent.

Send questions and comments to support@mines.edu
Wednesday, 08-Nov-2006 11:59:24 MST