Java

[AdamB]

Anyone else disabling Java?

http://thenextweb.com/insider/2013/0...r-only-option/

http://krebsonsecurity.com/2013/01/z...-in-crimeware/

Does Untangle provide any protection on this?

[jcoehoorn]

We stopped distributing java on our PCs last term, and as this coincided with a mass push moving all our computers from Windows XP to Windows 7, almost no one on campus has Java any more.

[AdamB]

We stopped distributing java on our PCs last term, and as this coincided with a mass push moving all our computers from Windows XP to Windows 7, almost no one on campus has Java any more.

Good call, might be the direction we are headed in for most of the company.

[sky-knight]

I only put Java out on machines that need it, which is a very large number.

You can't work with state government websites without it, and a large portion of banks as well.

[AdamB]

I only put Java out on machines that need it, which is a very large number.

You can't work with state government websites without it, and a large portion of banks as well.

Good point, allot of our employees work with Government websites.

[sky-knight]

If your users that need Java can handle it, NoScript on Firefox is quite handy.

But I've got a fairly low success rate of that solution sticking because it requires a ton of fiddling.

[AdamB]

If your users that need Java can handle it, NoScript on Firefox is quite handy.

But I've got a fairly low success rate of that solution sticking because it requires a ton of fiddling.

Yea I was reading up on that option also. To top it off we have a large mixture of browsers and no domain controller.

[sky-knight]

Yea I was reading up on that option also. To top it off we have a large mixture of browsers and no domain controller.

Now that sounds wonderfully normal!

Just like the networks I take care of, you can only do what the client will let you do. And, let's be fair, in a ton of cases domains are just dead weight.

As for what Untangle can do for you, that's Web Filter. The malware category tries to deal with zero day stuff, and does a decent job keeping your browsers away from the junk. That said, I personally got hit last quarter right through Untangle's Premium walls, so it's not perfect.

[AdamB]

Now that sounds wonderfully normal!

Just like the networks I take care of, you can only do what the client will let you do. And, let's be fair, in a ton of cases domains are just dead weight.

As for what Untangle can do for you, that's Web Filter. The malware category tries to deal with zero day stuff, and does a decent job keeping your browsers away from the junk. That said, I personally got hit last quarter right through Untangle's Premium walls, so it's not perfect.

I completely agree. We have gotten by for many years without a domain controller, but I can see it of use in a few areas. Its good to hear that web filter has atleast some abilities to prevent an issues such as this.

[jcoehoorn]

FWIW, there is a Java update out now that purports to fix this.