近期經教育部通報及相關資安報告顯示，校內對外開放之IP(可直接由校外連接)被檢測出不符合資安的設定，極可能導致資安事件發生，故請大家檢視所使用及管理的IP，是否有必要開放校外直接存取，如非必要，請聯繫貴單位網管人員或電子計算機中心作業組關閉IP允許校外直接存取。

請大家檢視自己使用及管理的電腦、資通訊設備，在完整備份重要資料於外接儲存裝置後進行下列動作：
   1.檢視作業系統及安裝軟體是否已停止更新，若是，請更換安全有更新的作業系統及軟體。(例如：Windows 10、Office 2016、Office 2019都須停止使用，請安裝新版的作業系統與軟體。)
   2.檢視作業系統是否已更新至最新最穩定的版本，若無，須更新。(例如：Windows Update)
   3.如果有安裝網頁伺服器(例如：Apache、Microsoft IIS、Nginx)，請將網頁伺服器更新至最新最穩定的版本。
   4.網頁伺服器必須使用HTTPS進行連線，其TLS版本須為1.2或1.3，若非此二版本，須更新。
   5.若您使用的電腦有校外連線的需求，請申請VPN進行連線，不可直接開放IP允許校外直接存取，要關閉。

如有資安相關問題，請洽電子計算機中心：
游順發組長　6209　rogeryu@mail.ntust.edu.tw
張云蘋　　　6929　applechang@mail.ntust.edu.tw

【Security】Unless absolutely necessary, please do not enable the setting that allows direct access from outside the school via your IP address.

Recent reports from the Ministry of Education and related cybersecurity reports indicate that some campus IPs that are open to external users (allowing direct access from outside the campus) have been found to be non-compliant with cybersecurity settings, which could potentially lead to cybersecurity incidents. Therefore, please review the IP you use and manage to determine if it is necessary to allow direct access from outside the campus. If not, please contact your network administrator or the computer center's operations team to disable direct access from outside the campus for these IP.

Please review the computers and ICT devices you use and manage. After fully backing up important data to external storage devices, please perform the following actions：
   1. Check if your operating system and installed software are no longer updated. If so, please replace them with a secure and updated operating system and software. (For example, Windows 10, Office 2016, and Office 2019 should be discontinued; please install the latest versions.)
   2. Check if your operating system is updated to the latest and most stable version. If not, update it. (For example, Windows Update)
   3. If you have a web server installed (e.g., Apache, Microsoft IIS, Nginx), please update it to the latest and most stable version.
   4. The web server must use HTTPS for connection, and its TLS version must be 1.2 or 1.3. If it is not one of these two versions, it must be updated.
   5. If your computer requires off-campus access, please apply for a VPN. Do not directly allow off-campus access to your IP address; disable it.