1. Virtual Private Network (VPN)
Laurie Collinsworth
4/5/2016

2. Agenda Introductions Service Description Value Proposition Metrics
Cost
Security
More information
Q&A

3. Introductions Service owner: Laurie Collinsworth
Service manager: Eric Cronise
Other service delivery team members:
Eng: Kevin Feeney / Dan Eckstrom
Ops: Jenny Signor / Leisha Redfield
IT Communications, Knowledge Mgmt & Training
IT Support Desk

4. Service Description Service name: Virtual Private Network (VPN)
Product(s): CISCO AnyConnect
Brief text description: The VPN service provides the Cornell community with secure, authenticated remote access to the campus data network. Departments can request a locally-administered pool. Departmental pools can be protected by Two Step Duo login.
Available to:
Faculty, Staff & Students
departmental pools are requested and managed by Technical Support Providers (TSP).
Fee? No
Service tier: Zero

5. AnyConnect clients Clients available on 4/4//2016 Source OS Versions
MacOS
CUVPN headend
10.8, 10.9, 10.10, 10.11
Windows
Windows7, 8, 8.1, 10
(x86(32-bit) & x64(64-bit))
Linux
64-bit Linux only
iOS (iPhone, iPad)
AppStore -
Android
GooglePlay
ChromeOS
Chrome Web Store
For TSP:

6. Value Proposition Value proposition Customer impact Key benefits
Reduces risk of data compromise during network transmission
Reduces risk of server compromise (if locked to campus, departmental pool, or Two Step Duo Login)
Customer impact
Ubiquitous access with no fee encourages use
Key benefits
Cost savings by leveraging central staff & support
Monitored, securely patched, redundant
Integration into core of campus network

7. Metrics FY16 Q2 FY 16 Q2 Metrics Number of Connections 111,343
Number of department pools
144
Maximum concurrent sessions
496
Number of unique users
6577
FY 16 Unit cost/year
Per user
$2.52
Per connection
$0.15

8. Cost to deliver the service:
*5yr Hardware cost: $21,055
Fee for service: None
FY 16 Total Cost
$16,535
Hardware* & Software
$5,294
Labor
$9,737
Staff Support
$752
Administrative Overhead

9. Security What risks does use of the service mitigate?
Credential loss due to network sniffing
Sensitive data loss during network transmission
Server compromise due to unprotected administrative access
How does the service mitigate risks?
Encryption of data transmission over the network
User login tracking to VPN IP address
Lock administrative access to servers to campus or department pool, not the world.
Multi-factor authentication available
Service is protected, actively patched, monitored 7/24/365

10. More information
Service web page:
Service level expectations:
Service catalog entry:
Service quarterly report:

11. Questions?
questions to:
Laurie Collinsworth