UAB IT Provides Critical Guidance to Campus on Appropriate Versions of Internet Explorer, Mac OS, and Java to Mitigate Risks of Exploitation

A critical security vulnerability was recently identified in the Java software used by many browsers for accessing Internet and internal web sites.  In response the U.S. Department of Homeland Security recommended that all web users disable or remove Java to mitigate the risks.  However, as many UAB systems require Java, UAB IT is providing guidance to the UAB Campus that will both protect the university and will provide the ability to continue accessing the required UAB systems.  Part of that guidance includes using separate browsers for accessing UAB vs. non-UAB websites, and using certain browser versions and Java versions. 

Windows Systems:

• On Windows 7 Install IE 9 and Java 1.7.0_21

• On Windows XP install IE 8 and Java 1.7.0_21

UAB IT has updated the minimum recommendations for versions of Internet Explorer and Java as UAB systems have improved functionality to support newer browsers and the currently secure version of Java. Internet Explorer 9 and Java 1.7.0_21 are recommended for installation on Windows 7 and IE 8 with Java 1.7.0_21 on existing XP systems. UAB IT also recommends using a separate browser with JAVA disabled for Internet use.  Use IE for on campus with Java enabled and your choice of Firefox or Chrome for Internet browsing with JAVA disabled (for information on disabling Java click here).

Mac Systems:

• Install OSX 10.8 and Java 1.7.0_21

UAB IT has updated the minimum recommendations for versions of Mac Operating systems and Java as UAB systems have improved functionality that are compatible with the current version of Java. The recommended operating systems for use on Campus are Apple OSX 10.7x and 10.8x. While Apple OSX 10.6x is still supported by Apple, vendors are no longer testing against it for compatibility. Apple operating systems will not run any version lower than Java 1.7.0_21.

UAB IT also recommends using two different browsers — one for surfing the Web and one just for accessing UAB systems. For Internet Web browsing, use one of the following: Firefox Safari, or Chrome, with Java disabled (for information on disabling Java click here). For working with just UAB systems, choose a different browser and enable Java to work in it. If you run into compatibility issues with the local browser and UAB IT systems, use the IT terminal servers to access UAB resources via RDP client (for information on using IT terminal servers on Mac click here).

For more information, contact AskIT (www.uab.edu/askit).

Tweet