Dec

							Technology Update

   TSAG Meeting 12/11/03
Outage Dec 20

   Saturday 10:00PM --> Sunday 12:00PM
   PPM will be replacing electrical panel in the MDF
   The MDF will have limited power during this time
   Affected systems:
       All inter-building network connectivity
       All Internet network connectivity
       Hence all non-local (via subnet) services will be unavailable


   Telephone systems will be operational
       Intermittent outage just at the beginning and at the end of
        the outage window
Holiday Operations Coverage

   Dec 25 & Jan 1:
       On-call operator


   Dec 26-31 & Jan 2-4:
       On-duty operator:   8:00am - 5:00pm
       On-call operator:   during other times

   Standard Off-hours (Network/Systems)
    Analysis Support
Email Quotas are being Applied

   Enforcement is underway for:
       All new accounts
       All student accounts (to be complete by Dec 15)
       100 MB limit for all accounts below this limit
       Over quota == No E-mail!
   Faculty/Staff maximum email storage limits:
     400 MB by Dec 15, 2003
     300 MB by Feb 15, 2004

     200 MB by March 15, 2004

     100 MB by April 15, 2004

    E-mails those above 400MB (22 43), 25 still over quota
   Yearly review of quotas by ATC is underway
TII Close-out

   Summary:
       Stage 1: wiring, Stage 2: electronics
       One of three campus within Phase 1 that are completed
   Lessons Learned
       Course Knowledge on Cisco Equipment
       Exchanged one-set of bugs for another
       Interoperability of Enterasys and Cisco
   What remains
       Return Enterasys equipment
       We are short hubs to comply with our trade-in agreement
        (~500 ports)
       Give us your old, broken, worn huddled hubs!
Post TII Activities

   CENIC (phase out of 4CNET)
   Wireless Enhancements
   Packeteer and Dragon
   Intracampus Network ACLs
       Classifying Subnets, e.g.,
           Student Lab subnets
           Administrative subnets
           Open Area subnets (live jacks)


   Authenticate to the wire (802.1X) ??
End of Life: IPX and Appletalk
   Original Announcement of Intent:
       TSAG Meeting, Nov & Dec 2002
   Proposed Last Date of support:
       Friday June 4 2004 (Last day of academic year)
   Reasons for the End of Life on Campus
       To reduce load on and to simplify management of Network
        Services
            IPX is 20% of load for 5% of population
       To reduce the load on NetWare/NDS® servers
       Novell and Apple have adopted pure IP
   Your tasks:
       Migrate Novell/Apple services off of IPX/Appletalk
            Need Netware 5 or above
            Need Mac OS 8.1 or above
       Provide early feedback on problems and concerns

    Sources:
        http://www.novell.com/info/collateral/docs/4621162.01/4621162.html
Campus IT Status Page
   Summary information from Big Brother, MRTG, Spectrum, etc.
   Provides:
       Summary status of Enterprise systems
       Pending Maintenance Announcement (if any)
       Black Lists:
         Spammers
                   E-mail messages blocked
         “Irresponsible” ISP or Host
                   Internet connectivity blocked
         “Compromised” Computers (ports disabled)
                   Network connectivity blocked
   Consult as part of IT diagnosis process
Registry of Computer Labs

   ATC requested Campus-wide Lab Schedule
   Intent: To allow students to more easy locate IT
    resources
   Information Needed:
       Location of Lab         Purpose of the Lab
       Provided Equipment      (e.g., 24 Windows XP, …)
       Supported Users         (e.g., only COMP 100 students)
       Hours of Operation
           Restricted Access
           Open Access
       Contact point for more info (e.g., URL)
   We need you to provide the information
FISMA Audit Preparation

   Financial Integrity and State Manager's Accountability
    (FISMA)
   Focus has been on “Mainframe” type of operations
   Higher focus on Client/Server types of operations (e.g., CMS)
   Some Emphasis this year:
       Account Lifecycle
       Access Controls: Vendors, Passwords, Audit, Review, …
       Confidentiality Protection
       DRP and BCP
       Non-Enterprise level operations (more coming in the future)
   We will starting preliminary discussions with local IT units
                                    Proposal
           Blocking Administrative Lists
   We have three types of lists
       -l@csun.edu:                    Department/Official Lists
       -c@csun.edu:                    Class Lists
       -g@csun.edu:                    General Purpose Lists
   Goal: to prevent spam on “Administrative” lists
   Tested with tsag-l@csun.edu (thanks Peter!)
   Ramification:
       Only individuals with a campus accounts can send e-mail to Administrative Lists
       Home users: use Webmail or configure e-mail client to use SMTP.csun.edu
   But “whatif” I don’t want my list blocked!
       Transform your list to a -g list (e.g.)
       Set up your list to “Reply-to” the owner