Virtual Private Network (VPN) Laurie Collinsworth 4/5/2016

Agenda Introductions Service Description Value Proposition Metrics Cost Security More information Q&A

Introductions Service owner: Laurie Collinsworth Service manager: Eric Cronise Other service delivery team members: Eng: Kevin Feeney / Dan Eckstrom Ops: Jenny Signor / Leisha Redfield IT Communications, Knowledge Mgmt & Training IT Support Desk

Service Description Service name: Virtual Private Network (VPN) Product(s): CISCO AnyConnect Brief text description: The VPN service provides the Cornell community with secure, authenticated remote access to the campus data network. Departments can request a locally-administered pool. Departmental pools can be protected by Two Step Duo login. Available to: Faculty, Staff & Students departmental pools are requested and managed by Technical Support Providers (TSP). Fee? No Service tier: Zero

AnyConnect clients Clients available on 4/4//2016 Source OS Versions MacOS CUVPN headend 10.8, 10.9, 10.10, 10.11 Windows Windows7, 8, 8.1, 10 (x86(32-bit) & x64(64-bit)) Linux 64-bit Linux only iOS (iPhone, iPad) AppStore - Android GooglePlay ChromeOS Chrome Web Store For TSP: http://www.it.cornell.edu/services/vpn/howto/tsp/installers.cfm

Value Proposition Value proposition Customer impact Key benefits Reduces risk of data compromise during network transmission Reduces risk of server compromise (if locked to campus, departmental pool, or Two Step Duo Login) http://www.it.cornell.edu/services/vpn/howto/tsp/vpn_twostep.cfm Customer impact Ubiquitous access with no fee encourages use Key benefits Cost savings by leveraging central staff & support Monitored, securely patched, redundant Integration into core of campus network

Metrics FY16 Q2 FY 16 Q2 Metrics Number of Connections 111,343 Number of department pools 144 Maximum concurrent sessions 496 Number of unique users 6577 FY 16 Unit cost/year Per user $2.52 Per connection $0.15

Cost to deliver the service: *5yr Hardware cost: $21,055 Fee for service: None FY 16 Total Cost $16,535 Hardware* & Software $5,294 Labor $9,737 Staff Support $752 Administrative Overhead

Security What risks does use of the service mitigate? Credential loss due to network sniffing Sensitive data loss during network transmission Server compromise due to unprotected administrative access How does the service mitigate risks? Encryption of data transmission over the network User login tracking to VPN IP address Lock administrative access to servers to campus or department pool, not the world. Multi-factor authentication available Service is protected, actively patched, monitored 7/24/365

More information Service web page: http://www.it.cornell.edu/services/vpn/ Service level expectations: https://www.it.cornell.edu/services/sle.cfm?doc=55 Service catalog entry: https://catalog.it.cornell.edu/admin/60 Service quarterly report: http://cio.cornell.edu/resources/it-reports-documents-and-presentations/itcornell-quarterly-metrics/virtual-private-network

Questions? Email questions to: Laurie Collinsworth ljc1@cornell.edu