Technology Update TSAG Meeting 12/11/03

Outage Dec 20 Saturday 10:00PM --> Sunday 12:00PM PPM will be replacing electrical panel in the MDF The MDF will have limited power during this time Affected systems: All inter-building network connectivity All Internet network connectivity Hence all non-local (via subnet) services will be unavailable Telephone systems will be operational Intermittent outage just at the beginning and at the end of the outage window

Holiday Operations Coverage Dec 25 & Jan 1: On-call operator Dec 26-31 & Jan 2-4: On-duty operator: 8:00am - 5:00pm On-call operator: during other times Standard Off-hours (Network/Systems) Analysis Support

Email Quotas are being Applied Enforcement is underway for: All new accounts All student accounts (to be complete by Dec 15) 100 MB limit for all accounts below this limit Over quota == No E-mail! Faculty/Staff maximum email storage limits: 400 MB by Dec 15, 2003 300 MB by Feb 15, 2004 200 MB by March 15, 2004 100 MB by April 15, 2004 E-mails those above 400MB (22 43), 25 still over quota Yearly review of quotas by ATC is underway

TII Close-out Summary: Lessons Learned What remains Stage 1: wiring, Stage 2: electronics One of three campus within Phase 1 that are completed Lessons Learned Course Knowledge on Cisco Equipment Exchanged one-set of bugs for another Interoperability of Enterasys and Cisco What remains Return Enterasys equipment We are short hubs to comply with our trade-in agreement (~500 ports) Give us your old, broken, worn huddled hubs!

Post TII Activities CENIC (phase out of 4CNET) Wireless Enhancements Packeteer and Dragon Intracampus Network ACLs Classifying Subnets, e.g., Student Lab subnets Administrative subnets Open Area subnets (live jacks) Authenticate to the wire (802.1X) ??

End of Life: IPX and Appletalk Original Announcement of Intent: TSAG Meeting, Nov & Dec 2002 Proposed Last Date of support: Friday June 4 2004 (Last day of academic year) Reasons for the End of Life on Campus To reduce load on and to simplify management of Network Services IPX is 20% of load for 5% of population To reduce the load on NetWare/NDS® servers Novell and Apple have adopted pure IP Your tasks: Migrate Novell/Apple services off of IPX/Appletalk Need Netware 5 or above Need Mac OS 8.1 or above Provide early feedback on problems and concerns Sources: http://www.novell.com/info/collateral/docs/4621162.01/4621162.html http://docs.info.apple.com/article.html?artnum=30822

Campus IT Status Page Provides: Summary information from Big Brother, MRTG, Spectrum, etc. Provides: Summary status of Enterprise systems Pending Maintenance Announcement (if any) Black Lists: Spammers E-mail messages blocked “Irresponsible” ISP or Host Internet connectivity blocked “Compromised” Computers (ports disabled) Network connectivity blocked Consult as part of IT diagnosis process

Registry of Computer Labs ATC requested Campus-wide Lab Schedule Intent: To allow students to more easy locate IT resources Information Needed: Location of Lab Purpose of the Lab Provided Equipment (e.g., 24 Windows XP, …) Supported Users (e.g., only COMP 100 students) Hours of Operation Restricted Access Open Access Contact point for more info (e.g., URL) We need you to provide the information

FISMA Audit Preparation Financial Integrity and State Manager's Accountability (FISMA) Focus has been on “Mainframe” type of operations Higher focus on Client/Server types of operations (e.g., CMS) Some Emphasis this year: Account Lifecycle Access Controls: Vendors, Passwords, Audit, Review, … Confidentiality Protection DRP and BCP Non-Enterprise level operations (more coming in the future) We will starting preliminary discussions with local IT units

Proposal Blocking Administrative Lists We have three types of lists -l@csun.edu: Department/Official Lists -c@csun.edu: Class Lists -g@csun.edu: General Purpose Lists Goal: to prevent spam on “Administrative” lists Tested with tsag-l@csun.edu (thanks Peter!) Ramification: Only individuals with a campus accounts can send e-mail to Administrative Lists Home users: use Webmail or configure e-mail client to use SMTP.csun.edu But “whatif” I don’t want my list blocked! Transform your list to a -g list (e.g.) Set up your list to “Reply-to” the owner