80 likes | 210 Views
Closing SFSU border firewall. Prepared by E.Rayz DoIT Network Services Coordinator February 14, 2012. Topics covered by this presentation. CSU San Francisco Edge Network Design overview Firewall rules - how they work Best practices when closing the borders On-going support overview Q&A.
E N D
Closing SFSU border firewall Prepared by E.Rayz DoIT Network Services Coordinator February 14, 2012
Topics covered by this presentation • CSU San Francisco Edge Network Design overview • Firewall rules - how they work • Best practices when closing the borders • On-going support overview • Q&A
Best practices when closing the borders • - VPN software available for faculty and staff, also some sponsored contractors • systems administrators are encouraged to use sftp, ssh, and https vsother unencrypted protocols • - systems administrators need to use static ip addresses for servers, and register those ip addresses in dns via e-mail to dns@otrs.sfsu.edu • - requests for justified exceptions will follow an established process and change control procedure, and may take approximately 1 week
On-going support for exemptions requests • The completed “Border FW inbound Port exemption” form should be emailed by authorized Change Control contact to helpdesk@sfsu.edu with a CC to fw-request@sfsu.edu by Thursday, March 1st, 2012. The border firewall closure is scheduled for Thursday, March 15th, 2012 • You will be contacted within 3 business days regarding your request • The following unencrypted and shell access protocols will not be allowed through the firewall except where there is a business justification (e.g. anonymous FTP). End users and administrators are encouraged to use campus VPN for systems needing access via any of the following: • Telnet • FTP • Secure Shell • Remote Desktop
Q&A • A comprehensive border firewall workshop is scheduled for February 20th 10:30 a.m. – 12 noon, please stay tuned for details on location and full agenda