Blacklisting and deleting hosts on Bluecat

Under some circumstances, we may need to remove a host from the network and prevent it from having access to Tufts network resources. Some reasons could be that we receive a notice of DMCA violation associated with a certain IP, or if a host is trying to spread malware, or if a host is just behaving in a way that prevents the network and/or the hosts on it from operating normally.

When a blacklisted host connects to the network and asks Bluecat for a DHCP address, Bluecat provides an IP address in a special range that indicates it's a restricted network. The only thing users should be able to get to from a restricted/blacklisted IP address is the restricted portal page.

FSPs can blacklist a host. However, they cannot remove a host from the blacklist. Blacklist removals need to go through Info Security. Please be careful and do not blacklist hosts inappropriately.

To blacklist a host, search on the MAC address or the username the MAC is registered to, and select the "blacklist" button under the host listing. If you wish to simply delete an obsolete registration entry, you can also do that from this page and select the "delete" button. Blacklisted hosts cannot be deleted while they are on the blacklist.

The registration listing will also show the time a host was registered and when the registration expires.