The main point

Cyber alerts are published every day identifying vulnerabilities that need to be patched (fixed). You may have recently seen in the news that many government agencies are continuing to be impacted by cyberattacks on software vendors like Microsoft, FireEye and SolarWinds. Since hackers continue to exploit vulnerabilities until the updates are installed, Forest Service computers must be patched on an ongoing basis.

This month’s updates include the AnyConnect application. The Chief Information Office will soon upgrade the application to patch the vulnerabilities. To ensure your computer receives the patches as quickly as they are available, please leave your computer powered on and connected to the U.S. Department of Agriculture Forest Service network either in the office or through the Virtual Private Network. The CIO Cybersecurity team recommends a routine cyber hygiene practice of staying logged into the network overnight, every night, and then rebooting every morning.

What you need to do

To receive upcoming updates, leave your computer powered on and connected to the Forest Service network after work hours from 6 p.m. to 6 a.m. (the time zone is relative to your location).

• If you are working offline during the day due to issues with VPN, you still need to log into VPN at the end of your work day to ensure you receive the patches overnight.
• If taking your computer to a location requiring VPN, please connect through VPN, log in, and then lock your computer (remove your LincPass card) and leave it running.
• Some updates will require a computer restart after installation. When a restart is required, you will receive a notification that provides options for restarting immediately or delaying for a number of hours.
• If you are logged into the Forest Service network, you may receive a pop-up notification in the lower right corner of your computer screen during the installation. If the pop-up indicates that a restart is needed, save your work and restart as soon as possible.

Computers that do not receive the update may need to be separated from the network for security purposes. Therefore, the CIO is asking that you make every attempt to get your computer updated immediately by following the instructions listed above.

If you have any questions, please contact the Customer Help Desk.

Help is available

For more information on how to access virtual collaboration tools from any computer with a LincPass reader, read the CIO Update: Virtual collaboration tools and other teleworking resources available to Forest Service employees.

For technical help call the Customer Help Desk at 1-866-945-1354 (TTY: 1-800-877-8339), start a chat with an agent, or type the full Knowledge Base Article number or keywords into the search box on the Forest Service Digital Work Place Portal to find helpful knowledge management documents.

The CIO is committed to providing reasonable accommodation in all of its activities, services and programs for individuals with disabilities. If you require reasonable accommodation in accessing and using the information contained in this email, please email CIO News.

Visit the CIO News Archives for past emails.