Transcript Slide 1

Subnet Managers
September 15, 2009
Agenda Items
•
•
•
•
•
•
•
•
Middleware Projects
Windows Services updates
RamCT
Proofpoint
Long passwords
Licensing
NOC
Technology Demo - Net Connect
9/15/2009
Subnet Managers
2
ACNS Middleware
• eID Project
– Expired eID reactivation
• Expired account holder must run through registration at
eid.colostate.edu
– WebAuth
• Now available during Oracle maintenance windows
• Unavailable services during Oracle maintenance
– Forgotten password help
– eID Modify
– eID Registration
– Currently under review
• Properly identifying students and applicants
9/15/2009
Subnet Managers
3
ACNS Middleware
• OMR (Optical Mark Recognition) project
– grader.colostate.edu system replacement
•
•
•
•
•
Objective: remove legacy systems and streamline processes
Discovery and documentation of current system complete
The functionality of the current system will be maintained
Greatly simplify RamCT integration for instructors
Migrate process to ACNS supported platform
– Course survey system replacement
•
•
•
•
9/15/2009
Objective: remove legacy systems/code and streamline processes
The survey format will not change
ACNS Middleware will rewrite the integration components
TILT will provide reporting mechanism
Subnet Managers
4
ACNS Middleware
• OMR project timeline
9/15/2009
Subnet Managers
5
ACNS Middleware
• Shibboleth at CSU
– Allows local authentication to other institutions or
entities via a federation
• Possible uses
–
–
–
–
Library resources
Microsoft DreamSpark
iTunes
Google Apps
– Initial phase in place
• Shibboleth identity provider
• Directory server housing eduPerson extensions
9/15/2009
Subnet Managers
6
ACNS Middleware
• Flu Reporting
– Self-Reporting system for students, faculty and staff
• Available through RAMweb, ARIESweb soon
• https://wsnet.colostate.edu/cwis24/flureporting/
– Self-Reporting student flu illness – Default.aspx
– Self-Reporting faculty/staff flu illness - StaffReport.aspx
– Report Module - ReportAuth.aspx
• Provides data collection
• Instructor notification
– Reporting
• Faculty pages for a listing of self-reported students
• Reports for all staff
By department, active cases and totals
9/15/2009
Subnet Managers
7
ACNS Windows Services Updates
• DNS
• KMS
• Schema updates for Server 2008 R2
9/15/2009
Subnet Managers
8
RamCT
• Browser configuration
9/15/2009
Subnet Managers
9
ACNS – Proofpoint
 Architecture remains at 14 servers, 12
scanning mail, 1 master, 1 Quarantine
 Proofpoint continues to be a valuable asset to
managing spam/virus email - 8 Million
messages/day, only dealing with 4 million,
quarantine down to 2 million (2 Weeks)
Colorado State University
10
ACNS – Proofpoint
• Recently changed RBL subscriptions
– Stopped using SpamHaus list (2.2+million hits a day
wasn’t “casual usage”)
– Trying Proofpoint PDR
– PDR dropped incoming spam scans 50%!
• Proofpoint contract being renewed currently,
with PDR as a permanent installed option.
Colorado State University
11
ACNS - Passwords
• Long password support in final stages of
completion.
• Campus will be consulted as to new policies
(Length, strength, expiry, etc..)
• Long passwords already implemented on all
non-eID synchronized central Unix based
systems.
Colorado State University
12
Licensing
• Site License
– End Note
– Maple 13
– Autodesk
9/15/2009
Subnet Managers
13
NOC Agenda
•
•
•
•
•
•
•
Traffic Stats
Wireless upgrades/status
Modem pool
NSF HPC upgrades
HP5300 updates
Security Cameras
Secure access
9/15/2009
Subnet Managers
14
Traffic Stats
(All CSU + FCCN)
9/15/2009
Subnet Managers
15
Traffic Stats
(CSU Main Campus)
9/15/2009
Subnet Managers
16
Wireless
9/15/2009
Subnet Managers
17
Wireless upgrades/status
• UTFAB:
– Eddy Phase 1 completed.
– Engineering Phase 1 underway.
– Education and Chemistry Phase 1 pending.
– Hope to get next list of buildings from UTFAB in
November.
• Added wireless:
– GSB, Moby, Hughes
• New wireless gateway (ultimate collection of “csu-visitor”
and “csu” into “csu”)
9/15/2009
Subnet Managers
18
Wireless coming soon
• Industrial Science, Athletic Training Center
(ATC), Indoor Practice Field (IPF)
9/15/2009
Subnet Managers
19
Modem Pool
• <moment of silence for 212-2222>
9/15/2009
Subnet Managers
20
NSF HPC
• 10 Gig to FRGP
– 10 Gig through border router and into E7
– Hopefully timed with E7 (mainsite) remodel
9/15/2009
Subnet Managers
21
Border Router Upgrades
• Current
9/15/2009
Subnet Managers
22
Border Router Upgrades
• Planned
9/15/2009
Subnet Managers
23
HP5300 Updates
• Bug in older code on 5300s
• 120 5300s in production
• Completed except for a few. Thanks to Dick
and Jim!
Colorado State University
24
Security Camera Committee
•
•
•
•
DVR model
IP Cameras
ONSSI
Concerns of Facilities, ACNS, CSUPD and
Departments
Colorado State University
25
VPN Client Upgrades
(Use SSL Gateway!)
• Versions prior to 4.8.01 have privilege escalation
issue.
• Currently provided version is: 5.0.05.0290
• No Vista 64-bit support with VPN client EVER per
Cisco!
• Idle timeout on VPN set to match SSL: 1 hour
idle, 8 hours total.
• Working on e-mail individuals still using clients
older than 4.8.01 advising them that connections
will eventually be blocked while encourage use of
SSL gateway.
Colorado State University
26
SSL Gateway
• secure.colostate.edu/netconnect –
“dynamically installed” VPN client that
works with Vista 64-bit.
• Use csu-net for wireless
authentication/encryption (VPN tunnels
bad – csu-net good!)
• secure.colostate.edu – built in remote
desktop feature (need to use netconnect
with Macs)
Colorado State University
27
Technology Demo
• NetConnect
9/15/2009
Subnet Managers
28