The change is a zone apply change changes to a

Info icon This preview shows pages 5–7. Sign up to view the full content.

View Full Document Right Arrow Icon
The change is a “zone apply” change (changes to a firewall zone ruleset, which includes source and destination IP addresses as well as changes to network ports allowed/denied). The change meets the University’s firewall configuration standards (example, no inbound * rules, requests for cleartext or insecure ports like telnet and ftp, etc.) as defined in CSSD Standard STD-2004-0803 Firewall Security Standard. The departmental firewall contact must be prepared to test the change the morning after the change has been executed. Express Queue request deadlines to the Help Desk are: Mondays at noon (execute Tuesday night) Wednesdays at noon (execute Thursday night) Thursdays at noon (execute Saturday night) 3.3 The firewall change request will be formally reviewed by Security and by Network Engineering during a weekly “NetSec” meeting (Wednesday at 2 PM) for compliance to CSSD firewall guidelines and standards, as well as to potential impact to University network services and systems operation. If compliant, the change request ticket will be approved by the Information Security Officer. If the request is denied, the Security Team will notify the contact by e-mail of the denial and the reason for the denial. Suggestions will also be made on how to change the request so that it can be accepted. Procedure: PRC-2004-0803 Revision: 0.2.6 Effective Date: May 24, 2005 Page 5 of 15
Image of page 5

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full Document Right Arrow Icon
SECURITY PROCEDURE Firewalls Express Queue: firewall zone changes placed in Express Queue will be formally reviewed during the weekly NetSec meeting as well as on conference calls on Mondays and Thursdays at 2:30 pm with representatives from Security, Network Engineering, and the NOC. 3.4 Once the firewall change request has been approved, the change will be presented at CSSD’s change management call (Thursdays at 9 am). If approved, the change management request ticket will be set to scheduled, and the change will be staged in LSMS for execution during the next applicable maintenance window. An e-mail will be sent to the contact confirming that the change will be executed, with information on when the change will be executed, and with a reminder that the contact will need to ensure that end-user acceptance testing is to be performed immediately after the change is executed. Express Queue: firewall zone changes placed in Express Queue will be reviewed during the daily helpdesk ticket call on Tuesdays and Fridays at 9 am. 3.5 CSSD’s Network Operations Center will take change request tickets in scheduled status and execute during the next change implementation period (Saturdays at 11 PM). Express Queue: firewall zone changes placed in Express Queue will be executed by the Network Operations Center on Tuesday, Thursday and Saturday evenings at 11 PM. Express Queue requests will be scheduled by the IT Security Team in the Remedy change ticket form’s Implementation Date-Time field. Once the NOC implements the change, results of the implementation will be included by the NOC into the change ticket’s work log.
Image of page 6
Image of page 7
This is the end of the preview. Sign up to access the rest of the document.

{[ snackBarMessage ]}

What students are saying

  • Left Quote Icon

    As a current student on this bumpy collegiate pathway, I stumbled upon Course Hero, where I can find study resources for nearly all my courses, get online help from tutors 24/7, and even share my old projects, papers, and lecture notes with other students.

    Student Picture

    Kiran Temple University Fox School of Business ‘17, Course Hero Intern

  • Left Quote Icon

    I cannot even describe how much Course Hero helped me this summer. It’s truly become something I can always rely on and help me. In the end, I was not only able to survive summer classes, but I was able to thrive thanks to Course Hero.

    Student Picture

    Dana University of Pennsylvania ‘17, Course Hero Intern

  • Left Quote Icon

    The ability to access any university’s resources through Course Hero proved invaluable in my case. I was behind on Tulane coursework and actually used UCLA’s materials to help me move forward and get everything together on time.

    Student Picture

    Jill Tulane University ‘16, Course Hero Intern