1. Technology Update TSAG Meeting 12/12/02

2. Announcements: Campus Operations Center: Holiday Hours  Christmas: 12/22-1/1 8am-5pm Coverage  On Call Coverage: 11/28, 12/25/, 1/1 Directory Authentication for Peoplesoft HR/FN (January 13) Campus UID, E-mail Address, or Peoplesoft Operator ID Directory Authentication for http://my.csun.edu (Spring) Experimental IRC Helpdesk chat room is disbanded! IPX and Appletalk being phased out. VPN is in production! Voice/IP Change Over (January 18)

3. E-mail Updates SPAM Control -versus- Censorship: TSAG and ATC agree, it’s a client-side issue. Disaster Recovery Plans (January Test) SMTP auth(entication)  Fact: SPAM is generated on campus!  We need to require authentication for the sending of all e- mail (even intra-campus e-mail)!  A&F, Housing, and ITR already require SMTP auth for intercampus e-mail.  Many, but not all, areas have responded.  On __?___, the entire campus will require authentication for sending of all e-mail.

4. (Adjusted) Mail Architecture petrel alpha admsrvcs Anti-virus Director Content Filter smtp smtp_internal smtp_notify smtp_externel mx=10 “smtp_external” mx=20 “smtp_backup” mx=30 “smtp.ecs.” | “smtp” Off-Campus E-mail Antispam parrot root mail

5. Firewalls and ACLs Initial Goal (defining Internet Servers):  To deploy a Firewall around the Campus in which only “Internet Servers” are accessible from off-campus. Next Phase (defining Campus Servers):  To deploy ACLs around subsections of the Campus in which only “Campus Servers” are accessible from all areas of the campus  Off-Campus Access to Campus Servers via the VPN Timing:  TII Impact  Getting Information from units

6. TII (Stage 2): Begins January Firewalls Old Routers Cisco Routers West EdQ Anh Internet Local Switches/Devices

7. Upcoming Edge ACL Changes Block all inbound network connections:  to host within the range: 130.166.*.21 -- 130.166.*.254 Block all inbound network connections  for the protocols: telnet, smtp*, imap*, pop* (and the ssl related ports) * Only exceptions are the previously defined mail servers. Target date: starting December 13 Your task: Provide input. (Only one unit has done so!) Next step: Block all inbound connections to non-Internet Servers. Your task: Provide a list of all you Internet Servers to me. (Even if you requested ACLs, etc. in the past.)

8. Policies and IT Standards New Policies Approved by Cabinent  Disk and E-mail Policy  Campus Account Policy Endorsed by ATC:  CSUN Security Policy  Unauthorized E-mail Policy Under review:  Copyright Material  Confidential Information Role of TSAG in the consultative process? (feedback!)

9. Desktop Standards Why Standards?  To reduce the complexity of the system  To ensure the Campus community uses the appropriate technology to support the work of the students, faculty, and staff via a secure, reliable method.  To educate the faculty and administration on the rational of the standards and gain support  To develop transition plans (locally and campus-wide) to adopt new and phase-out old technology TSAG’s task/role?  Develop and recommend standards and best practices  One size will not fit all!  What is the status of the various TSAG subcommittee’s