Subnet Managers September 15, 2009

1. Subnet ManagersSeptember 15, 2009

2. Agenda Items • Middleware Projects • Windows Services updates • RamCT • Proofpoint • Long passwords • Licensing • NOC • Technology Demo - Net Connect Subnet Managers

3. ACNS Middleware • eID Project • Expired eID reactivation • Expired account holder must run through registration at eid.colostate.edu • WebAuth • Now available during Oracle maintenance windows • Unavailable services during Oracle maintenance • Forgotten password help • eID Modify • eID Registration • Currently under review • Properly identifying students and applicants Subnet Managers

4. ACNS Middleware • OMR (Optical Mark Recognition) project • grader.colostate.edu system replacement • Objective: remove legacy systems and streamline processes • Discovery and documentation of current system complete • The functionality of the current system will be maintained • Greatly simplify RamCT integration for instructors • Migrate process to ACNS supported platform • Course survey system replacement • Objective: remove legacy systems/code and streamline processes • The survey format will not change • ACNS Middleware will rewrite the integration components • TILT will provide reporting mechanism Subnet Managers

5. ACNS Middleware • OMR project timeline Subnet Managers

6. ACNS Middleware • Shibboleth at CSU • Allows local authentication to other institutions or entities via a federation • Possible uses • Library resources • Microsoft DreamSpark • iTunes • Google Apps • Initial phase in place • Shibboleth identity provider • Directory server housing eduPerson extensions Subnet Managers

7. ACNS Middleware • Flu Reporting • Self-Reporting system for students, faculty and staff • Available through RAMweb, ARIESweb soon • https://wsnet.colostate.edu/cwis24/flureporting/ • Self-Reporting student flu illness – Default.aspx • Self-Reporting faculty/staff flu illness - StaffReport.aspx • Report Module - ReportAuth.aspx • Provides data collection • Instructor notification • Reporting • Faculty pages for a listing of self-reported students • Reports for all staff By department, active cases and totals Subnet Managers

8. ACNS Windows Services Updates • DNS • KMS • Schema updates for Server 2008 R2 Subnet Managers

9. RamCT • Browser configuration Subnet Managers

10. ACNS – Proofpoint • Architecture remains at 14 servers, 12 scanning mail, 1 master, 1 Quarantine • Proofpoint continues to be a valuable asset to managing spam/virus email - 8 Million messages/day, only dealing with 4 million, quarantine down to 2 million (2 Weeks) Colorado State University

11. ACNS – Proofpoint • Recently changed RBL subscriptions • Stopped using SpamHaus list (2.2+million hits a day wasn’t “casual usage”) • Trying Proofpoint PDR • PDR dropped incoming spam scans 50%! • Proofpoint contract being renewed currently, with PDR as a permanent installed option. Colorado State University

12. ACNS - Passwords • Long password support in final stages of completion. • Campus will be consulted as to new policies (Length, strength, expiry, etc..) • Long passwords already implemented on all non-eID synchronized central Unix based systems. Colorado State University

13. Licensing • Site License • End Note • Maple 13 • Autodesk Subnet Managers

14. NOC Agenda • Traffic Stats • Wireless upgrades/status • Modem pool • NSF HPC upgrades • HP5300 updates • Security Cameras • Secure access Subnet Managers

15. Traffic Stats(All CSU + FCCN) Subnet Managers

16. Traffic Stats(CSU Main Campus) Subnet Managers

17. Wireless Subnet Managers

18. Wireless upgrades/status • UTFAB: • Eddy Phase 1 completed. • Engineering Phase 1 underway. • Education and Chemistry Phase 1 pending. • Hope to get next list of buildings from UTFAB in November. • Added wireless: • GSB, Moby, Hughes • New wireless gateway (ultimate collection of “csu-visitor” and “csu” into “csu”) Subnet Managers

19. Wireless coming soon • Industrial Science, Athletic Training Center (ATC), Indoor Practice Field (IPF) Subnet Managers

20. Modem Pool • <moment of silence for 212-2222> Subnet Managers

21. NSF HPC • 10 Gig to FRGP • 10 Gig through border router and into E7 • Hopefully timed with E7 (mainsite) remodel Subnet Managers

22. Border Router Upgrades • Current Subnet Managers

23. Border Router Upgrades • Planned Subnet Managers

24. HP5300 Updates • Bug in older code on 5300s • 120 5300s in production • Completed except for a few. Thanks to Dick and Jim! Colorado State University

25. Security Camera Committee • DVR model • IP Cameras • ONSSI • Concerns of Facilities, ACNS, CSUPD and Departments Colorado State University

26. VPN Client Upgrades(Use SSL Gateway!) • Versions prior to 4.8.01 have privilege escalation issue. • Currently provided version is: 5.0.05.0290 • No Vista 64-bit support with VPN client EVER per Cisco! • Idle timeout on VPN set to match SSL: 1 hour idle, 8 hours total. • Working on e-mail individuals still using clients older than 4.8.01 advising them that connections will eventually be blocked while encourage use of SSL gateway. Colorado State University

27. SSL Gateway • secure.colostate.edu/netconnect – “dynamically installed” VPN client that works with Vista 64-bit. • Use csu-net for wireless authentication/encryption (VPN tunnels bad – csu-net good!) • secure.colostate.edu – built in remote desktop feature (need to use netconnect with Macs) Colorado State University

28. Technology Demo • NetConnect Subnet Managers