1. 1 NETWORK PLANNING TASK FORCE FY’07 “ Setting the Rates” 11/20/06

2. 2 Meeting Schedule – FY ‘07 ■ Meetings 1:30-3:00pm, 3401 Walnut Street ■ Fall Meetings ■ Intake and Current Status Review – August 21 ■ Agenda Setting & Focus Group Planning – September 18 ■ Focus Group – October 04 ■ Security Strategy Discussions – October 16 ■ Focus Group – October 17 ■ Network Strategy Discussions – October 30 ■ Strategy Discussions – November 6 ■ Final Meeting-Prioritization /Rate Setting – November 20 ■ Focus Group Feedback – December 4

3. 3 Agenda ■ FY ’07 strategic topics summary ■ Central authorization system ■ Financial summary ■ Network financial health ■ Setting the CSF Rate ■ Other proposed rates ■ Status of New Funding Model

4. 4 FY ’07 Strategic Topics ■ Building uplinks: gigabit and redundant links ■ Network access control ■ Scan and Block ■ PennNet Gateway (802.1X) ■ Campus-wide wireless ■ VoIP ■ In building cellular coverage ■ Security initiatives ■ Central authorization system

5. 5 Backbone Infrastructure

6. 6 Building Uplinks: Gigabit and Redundant Links ■ Goal ■ 2 gig links per building/subnet ■ Status ■ 18 gig only ■ 6 gig/100Mbps ■ 17 dual gig ■ We have a long way to go in reaching this goal. ■ The lion’s share of the CSF funding is going to support this effort.

7. 7 Security Initiatives FY07FY08FY09Beyond ■ Create documentation for recommended security configurations for most common devices ■ Evaluate 3rd party mobile data security tools and services. ■ Develop a secure remote access strategy. ■ Develop a strategy for protecting mobile devices, poss. to include key recovery ■ Pilot a central file service (e.g. WebDav). ■ Pilot mobile data security tools as appropriate ■ Design and implement secure remote access pilot. ■ Develop decentralized IDS strategy. ■ In policy, require encryption of confidential data. ■ Roll out WebDav, secure remote access, mobile security tools as approp. ■ Design and pilot decentralized IDS. ■ In policy, forbid confidential data on portable devices without a waiver. ■ Universal access control: authentication, scan and block ■ Perimeter firewall

8. 8 Central Authorization System Proposal for NPTF funding November 2006

9. 9 Central AuthZ System ■ Build a central authorization system that could be utilized by applications across the University ■ Utilize Penn Community data and school/center created lists to facilitate authorization decisions ■ Allow Schools and Centers to build and reuse authorization information across applications ■ Provide sophisticated group management capabilities, such as subgroups and composite groups, to support access management needs.

10. 10 Central AuthZ System: Benefits ■ Facilitate consistent application of University business rules ■ Managed through a common UI and standard API ■ Streamline maintenance of authorization data ■ Bring scattered redundant groups together for re-use ■ Allow useful actions on these groups -- group math, group nesting, exclusion criteria ■ Leverage Penn Community data for accurate, up to date authorization decisions ■ Can leverage existing attribute information ■ Support the creation of new groups ■ By schools, departments, and individuals! ■ Distributed/delegated model of control

11. 11 Central AuthZ System: Use Cases

12. 12 Central AuthZ System: Current Implementation Base ■ More than 80 institutions are currently evaluating or implementing central authorization technology. ■ Partial listing of where systems are in production or nearing a production cutover. ■ Stanford ■ Brown ■ Cornell University ■ Duke University ■ National Cancer Institute (caBIG - Cancer BioInformatics Grid) ■ South China University of Technology ■ University of Bristol ■ University of Chicago ■ University of Kansas ■ University of Southern California ■ University of Wisconsin

13. 13 Central AuthZ System: Costs ■ ISC would fund initial development and deployment (~$150,000) ■ Proposal for $110,000 annual ongoing funding from NPTF (1 FTE + HW & facilities) ■ Estimated at $.18/IP address/month

14. 14 Central AuthZ Systems ■ Clarify concerns and discuss issues

15. 15 FY ’07 – ’12 Network Financial Health

16. 16 FY ’08 Revenue Sources

17. 17 Penn iPhone – Projected Costs Assumptions 1.Meridian Business Set one-time cost of $368 is depreciated over a 60-month period for this comparison 2.30% allocation is included 3.Waived until end of FY ’08 4.All pilot rates end on June 30, 2007. 5.Price reduction in FY ’08 and beyond possible as cross subsidy for network is reduced. 6.Cross-subsidy should be eliminated by FY ’10 or sooner if possible.

18. 18 FY ’07 Current Central Service Fee Rate

19. 19 FY ’08 Projected Central Service Fee Rate

20. 20 FY’08 Proposed Rates

21. 21 New Funding Model ■ Current Status

22. 22 Next Steps NPTF makes rate recommendations. Rate recommendations presented to Provost and EVP. Final FY ’08 rates established. Rates sent to ABA in late December. Rates published in Almanac on December 20 th.