A service overview and catalog of Vulnerability Scanning provided by the UC Berkeley IT Service Hub.
Description
The Information Security Office (ISO) offers both campus-wide and departmental vulnerability scanning to detect systems that may be vulnerable to attack.
Campus-wide scanning: ISO continuously scans the campus network for security vulnerabilities on connected devices.
Departmental scanning: Campus departmental IT staff can use these tools for proactive discovery of vulnerabilities on the systems they support.
Benefits & Features
- Continuously probes the campus network to identify security weaknesses—such as missing patches, misconfigurations, or weak passwords—before they can be discovered and exploited by hackers.
- Automatically enrolls devices in the campus-wide scanning program, helping departments meet mandatory UC Berkeley security standards (MSSEI)
- Specialized on-demand scans for specific subnets provide detailed encrypted reports to prioritize and remediate risks within departmental environments.
Getting Started
- All devices connected to the campus network receive basic scanning services. To receive security notifications from scanning, you must be connected to a supported network (wired, Airbears, or VPN) and not the CalVisitor wireless network, and any firewalls must be configured to allow access from our scanners.
- For enhanced scanning services for machines with data classified at higher protection levels, make sure your systems are registered in
Socreg.
- For a
departmental scanner account, email your request to
security-scanning@berkeley.edu. Be sure to include your departmental affiliation and security contact email address.
Service Details
This service is available to Faculty and Staff for their department. All devices that connect to the campus network are scanned; departmental IT staff can request access for their department.
|
Technical Support:
Email
security-scanning@berkeley.edu for assistance.
|
Available 24/7. Support is provided Monday–Friday, 8:00 AM – 5:00 PM PT, excluding University holidays and curtailment periods.
|
There are no direct costs associated with this service.
|
This service is rated for P4, A2, and R2 data.
Compliance: Users are responsible for ensuring data handled within this service complies with the
Data and IT Resource Classification Standards.
|