I've just taken over administering a lab of Apple computers on a university campus. We have about 15 computers and I've discovered that they all have public IPs and domain names. Even our printer is accessible from the Internet, which is probably the most terrifying.
I tried running a port scan on the computers in my lab using nmap but (obviously) I started lighting up computers all over the building and further afield. I'm not sure how to test our vulnerability without getting in trouble with network operations.
This situation makes me really nervous and I feel like I don't have full control over my cluster of machines.
I have two questions:
Is it reasonable for me to be scared about the security situation in the lab?
Is it reasonable for me to ask IT services for an explanation of the networking here and ways to mitigate my lab's exposure?
I'd feel much better with everything behind Tomato-based router and some port-forwarding rules rather than every single machine fully accessible to the Internet. I know that's not a silver bullet but it's better than nothing.