IT Briefing

1
IT Briefing

• August 2006

2
IT Briefing Agenda 8/17/06

• Organization tweaks
• EOL Demo
• Symantec Reporting demo
• VPN Update
• Email IdM
• NetCom QA

• Karen Jenkins
• John Maxwell
• Daniel Palmer
• Jay Flanagan
• John Ellis
• Paul Petersen

3
Organization Tweaks

• Windows, Unix teams moved from OIS to CTS
• ERP systems moved from ADS to CTS
• Improve efficiencies and planning
• OIS focus on major data center initiatives
• Steve Siegelman Interim IT Technical Lead for the
  Systems group (Windows, Unix, and ERP

4
Organizational Tweaks (cont.)

• Jay Flanagan responsible for the Security, Email,
  and IdM teams
• Linda Erhard, IT Governance Liaison, moved from
  CTS to directly reporting to Rich Mendola
• OIS special projects position expanded to also
  support CTS
• AAIT will continue to adjust as/if needed to
  address strategic initatives

5

• John Maxwell

6
Key changes to Emory Online

• Standalone software installers no longer included
  on Emory Online
• Includes Emory Unplugged configuration tools and
  documentation
• Better integration with Residential Network
  Registration
• Internet shortcuts provide tie-ins for spreading
  the word about campus IT services.

7
Emory Online Fall 2006 Process

• Welcome
• Security Scan
• Configure Wireless
• Get Connected!

8
Process Breakdown Windows

• Security Scan
• InstallScript application that secures, scans,
  and patches a users Windows installation
• Configure Wireless
• AutoIt script configures users wireless
  connection for Emory Unplugged
• Emory Unplugged PDF for Windows XP
• Get Connected!
• Sets IE homepage to IT orientation site and
  places a internet shortcut (.url) on their
  desktop
• AutoIt script that tests for a 10.140 connection
  and launches CAT executable

9
Process Breakdown MacOS X

• Security Scan
• Advises user to use Software Update early and
  often and to download NAV for Mac from Software
  Express
• Configure Wireless
• AppleScript application configures local AirPort
  connection for Emory Unplugged
• Emory Unplugged PDF for OS X
• Get Connected!
• Sets Safari homepage to IT orientation site and
  places an internet shortcut (.url) on their
  desktop
• Opens Safari to http//netreg.service.emory.edu/
  for network registration

10
Security Scan

• Enables Windows XP firewall
• Enables Automatic Updates
• Installs and runs CCleaner
• Runs McAfee Stinger
• Installs Symantec AntiVirus
• Installs and runs SpybotSD
• Installs Service Pack (if Emory-owned)
• Installs Critical Updates (if Emory-owned)
• Instructs user to set passwords on all Windows
  accounts.

11
Emory Online Fall 2006

• Demonstrate new features

12
Emory OnLine
13
Special Thanks to

• All the testers
• Lee Clontz
• Donna Price

14
Feedback Questions to

• john.maxwell_at_emory.edu

15
Symantec AV Reporting _at_ Emory

• Daniel Palmer

16
Symantec AV Reporting

• Glimpse of current AV _at_ Emory
• 1 Managed Campus server (Wolf)
• Several Departmental Servers
• (AAIT, Emory College, Law School, etc)
• 1 Reporting Server (sesa)
• AV client count varies based on the dept
• Wolf - 9900 clients
• AAIT - 250 clients

17
Symantec AV Reporting

• Good Info but got anything useful?
• How about..
• On Wolf in the past 24 hours ..
• 6001 of 9904 clients have checked in
• 2947 clients with 10.1.0.401
• 263 clients with 10.0.2.2001 are infected
• 23 clients checked in with Auto Protect
  disabled
• How about..
• PC named pickle (mub is the user) hasnt
  checked in since
• 07/20/2006 175447
• Def Date 7/19/06 Rev 24
• AV Version - 10.0.2.2001

18
Symantec AV Reporting

• Symantect AV Reporting Server
• 1 Reporting Server running IIS and MSSQL Server
• Pros
• Web Interface
• Very Simple Dashboard
• Lots of canned reports
• Cons
• Some functions need Internet Explorer
• Does NOT authenticate to LDAP

19
Symantec AV Reporting
20
Symantec AV Reporting

• Wanna Join?
• Requirements-
• Must have some delimiting criteria
• i.e. Managed Server
• Single naming convention (PSFT)
• Single IP subnet (170.140.187.x)
• Let us know if you are interested in using the
• Symantec AV Reporting Server
• Send an email to ci-desktop_at_listserv.cc.emory.edu

21
Symantec AV Reporting
22
F5 VPN Update

• Jay D. Flanagan
• Andy Efting

23
Background

• Replacement for SecuRemote
• Usage http//vpn.emory.edu
• Documentation available online at
• it.emory.edu/showdoc.cfm?docid6389

24
Future

• Proposed replacement for vpn.service.emory.edu
• Targeting January 1, 2007 for decommissioning
• GINA

25
GINA

• Requires simple client install
• Creates VPN tunnel during logon
• Passes authentication credentials as if sitting
  on the network

26
(No Transcript)
27
(No Transcript)
28
(No Transcript)
29
(No Transcript)
30
Upgrade

• Firepass 5.5 to version 6.0
• Friday morning (Aug. 18), 630 AM
• Provide GINA functionality for production

31
Summary

• Successful transition to F5 for Admin Core users
• Planned transition to F5 to replace
  vpn.service.emory.edu
• Planned upgrade to provide GINA support

32
VPN / GINA
33
Email and IdM Updates

• John Ellis

34
Emory Backbone Upgrade Status and Timeline

• Paul Petersen

35
Agenda

• New Core Status
• New Firewall Status
• Working Timeline

36
New Core

• New Core Status
• All Routers installed
• Router code issues resolved
• Cautiously moving LANs
• 8/14 - Anatomy Basement
• 8/15 - The Depot
• 8/16 - Facilities Management
• 8/17 - Schwartz Performing Arts Center
• 8/18 - Cox Hall

37
New Firewall

• New Firewall Status
• The New Firewalls are installed
• The Management System is installed
• Each Virtual Firewall Context has been built
• Migration will start after border network is
  formed

38
Working Timeline
39
Working Timeline
40
NetCom