Colorado State University1 Subnet Managers Meeting 5/20/09 Kuali update – T. Fluharty Kuali update – T. Fluharty NOC update – G. Redder NOC update – G

Colorado State UniversityColorado State University 11

Subnet Managers Meeting Subnet Managers Meeting 5/20/095/20/09

Kuali update – T. FluhartyKuali update – T. Fluharty NOC update – G. RedderNOC update – G. Redder Security update – S. LovaasSecurity update – S. Lovaas Windows Group update – J. VoleskyWindows Group update – J. Volesky Student Email / Rampoint – R. Scott / R. MiotkeStudent Email / Rampoint – R. Scott / R. Miotke Microsoft / Autodesk update – D. NorenMicrosoft / Autodesk update – D. Noren Information Sys Update – K. JohnstonInformation Sys Update – K. Johnston Wrap-upWrap-up TimeClock Demo afterwardsTimeClock Demo afterwards

The New KFSThe New KFS

All functionality for these systems All functionality for these systems will move into KFS for FY 10will move into KFS for FY 10

Single Sign-on to KFS via Campus Administrative PortalSingle Sign-on to KFS via Campus Administrative Portal

FRSFRS CISCIS

CashNet(Department Deposits)

CashNet(Department Deposits)SciQuestSciQuest

KFSKFS

July 1, 2009 for FY 2010

KFS StrategyKFS Strategy

As few changes as possible:As few changes as possible:

• 7 digit account number – just added a 0 to the end7 digit account number – just added a 0 to the end

• General and Sub Ledgers merged into one accountGeneral and Sub Ledgers merged into one account

• First two digits of account number will represent fund First two digits of account number will represent fund groupgroup

• Removed duplication in subcode numbering schemeRemoved duplication in subcode numbering scheme

• Fund group field is alpha only – renamed fund groupsFund group field is alpha only – renamed fund groups

Account Account StructureStructure

FRSFRS KFSKFS General Ledger (GL) Acct General Ledger (GL) Acct

(022376)(022376) AccountAccount ((22223760376000))

Sub Ledger (SL) AcctSub Ledger (SL) Acct (223760)(223760)

077215/772150077215/772150 77772150215000 013000/134862013000/134862 13134862486200 026020/260200026020/260200 26260200020000

Subcode Subcode StructureStructure

FRSFRS KFSKFS Account ControlAccount Control (GL)(GL)

(1437, 2020)(1437, 2020) Object Object CodeCode (1437,2020) (1437,2020)

SubcodeSubcode (SL)(SL) (4380,6600)(4380,6600) (0600, 4000)(0600, 4000)

2111 Payable to Stu/Custm2111 Payable to Stu/Custm 2111 Pay to 2111 Pay to Stu/CustmStu/Custm

2111 Adm Pro Salary 2111 Adm Pro Salary 5111 Adm Pro 5111 Adm Pro SalarySalary

Subcode Subcode StructureStructure

Object Code

Range Type Example Object Codes

1XXX Asset Accounts Receivable (1437)

2XXX Liability Other Payables (2101)

3XXX Fund Balance Fund Balance (3000)

4XXX Revenue Other Sales + Service (4380)

5XXX – 9XXX

Expense General Supplies 6201Office Supplies 6208

Subnet Managers Subnet Managers 5/20/20095/20/2009

NOC update – Greg RedderNOC update – Greg Redder


NOC AgendaNOC Agenda

Traffic StatsTraffic Stats Wireless upgrades/statusWireless upgrades/status NTPNTP Modem poolModem pool Border router upgradesBorder router upgrades Core switch upgradesCore switch upgrades Edge switch upgradesEdge switch upgrades VPN Client upgradesVPN Client upgrades Secure Meeting and Video ConferencingSecure Meeting and Video Conferencing IPV6IPV6 Security: Passwords and Tokens, Sensitive info scanning, Security: Passwords and Tokens, Sensitive info scanning,

Phishing notifications schemePhishing notifications scheme


Traffic StatsTraffic Stats(All CSU + FCCN)(All CSU + FCCN)


Traffic StatsTraffic Stats(CSU Main Campus)(CSU Main Campus)


Wireless Wireless upgrades/statusupgrades/status

UTFAB:UTFAB: Morgan/Clark – upgraded to N and saturatedMorgan/Clark – upgraded to N and saturated Approved $200K: Engineering, Chemistry, Education, EddyApproved $200K: Engineering, Chemistry, Education, Eddy

(Will require existing switch ports.)(Will require existing switch ports.) Fill holes in Plant Sciences (pending)Fill holes in Plant Sciences (pending) Other holes?Other holes?

Added wireless:Added wireless: CMAPP (done)CMAPP (done) GSB (pending)GSB (pending)

Easy Access (csu-net)Easy Access (csu-net) These are 10.84 addresses on campusThese are 10.84 addresses on campus


NTPNTP

Dual stratum 1 servers: main campus Dual stratum 1 servers: main campus and foothills campusand foothills campus

Load balanced: redundancy, Load balanced: redundancy, reliability and efficiencyreliability and efficiency

Pending move of ntp.colostate.edu Pending move of ntp.colostate.edu officially – currently this points to officially – currently this points to yuma.yuma.


Modem PoolModem Pool

Going away September 1Going away September 1 Notifications sent out to subnet Notifications sent out to subnet

managers, admin assistants and managers, admin assistants and customers.customers.


Border Router Border Router UpgradesUpgrades

CurrentCurrent


Border Router Border Router UpgradesUpgrades

PlannedPlanned

1515

Core Switch UpgradesCore Switch Upgrades

PreviousPrevious


Core Switch UpgradesCore Switch Upgrades

CurrentCurrent


Edge Switch UpgradesEdge Switch Upgrades

Bug in older code on 5300sBug in older code on 5300s Many 5300s behind in code versionsMany 5300s behind in code versions Code upgrade, reboot, code upgrade Code upgrade, reboot, code upgrade

reboot (150+ switches)reboot (150+ switches)


VPN Client UpgradesVPN Client Upgrades(Use SSL Gateway!)(Use SSL Gateway!)

Versions prior to 4.8.01 have privilege escalation Versions prior to 4.8.01 have privilege escalation issue. issue.

Currently provided version is: 5.0.03.0530Currently provided version is: 5.0.03.0530 Testing 5.0.05 (looking for volunteers!). This version Testing 5.0.05 (looking for volunteers!). This version

works better with Vista!works better with Vista! No Vista 64-bit support with VPN client EVER per No Vista 64-bit support with VPN client EVER per

Cisco!Cisco! Idle timeout on VPN set to match SSL: 1 hour idle, 8 Idle timeout on VPN set to match SSL: 1 hour idle, 8

hours total.hours total. Host checking to be tested on VPN later this Host checking to be tested on VPN later this

Summer.Summer.


VPN Client Upgrades VPN Client Upgrades ScheduleSchedule

May/June: test new clientMay/June: test new client June 15 – e-mail individuals still using June 15 – e-mail individuals still using

clients older than 4.8.01 advising them of clients older than 4.8.01 advising them of July 1 deadline. Encourage use of SSL July 1 deadline. Encourage use of SSL gateway.gateway.

July 1 – Block clients earlier than 4.8.01.July 1 – Block clients earlier than 4.8.01.


Secure Meeting & Video Secure Meeting & Video ConferencingConferencing

Reminder: Secure Meeting (WebEx) Reminder: Secure Meeting (WebEx) feature of the SSL gateway: FREE! feature of the SSL gateway: FREE!

VC rooms available at various VC rooms available at various locations on campus: USC, Clark, locations on campus: USC, Clark, Library, etc.Library, etc.

Contact: [email protected]: [email protected]


IPV6IPV6(2002:8152:674f::8152:67(2002:8152:674f::8152:67

4f)4f) Issues we’ve seen – mostly with regards to DNSIssues we’ve seen – mostly with regards to DNS ““6to4” tunneling6to4” tunneling FRGP support IPV6 (unicast only) to I2FRGP support IPV6 (unicast only) to I2 PlansPlans

NOC to test a small deploymentNOC to test a small deployment Training to subnet managersTraining to subnet managers Purchase of only IPV6 capable equipmentPurchase of only IPV6 capable equipment No immediate plans for support of IPV6 on No immediate plans for support of IPV6 on

campus until testing completed.campus until testing completed.




Security update – Steve LovaasSecurity update – Steve Lovaas

Security: Passwords & Security: Passwords & TokensTokens

Auto-Login to Outlook / ExchangeAuto-Login to Outlook / Exchange Screen LockingScreen Locking Long password supportLong password support PCI Remote AccessPCI Remote Access

TokensTokens New SMS FeatureNew SMS Feature


Security: Sensitive Info Security: Sensitive Info ScanningScanning

May 15May 15thth deadline was difficult deadline was difficult Spider 3 vs. 4 experiences?Spider 3 vs. 4 experiences? Please let me know when you’ll be Please let me know when you’ll be

donedone


Security: Phishing Security: Phishing NotificationsNotifications

Current practiceCurrent practice Effective?Effective? Efficient?Efficient? Convienent?Convienent?

Broader coverage?Broader coverage?



Subnet Managers MeetingSubnet Managers Meeting

Windows - VoleskyWindows - Volesky


COLOSTATE Domain COLOSTATE Domain ControllersControllers

Hasty moved to Server 2008 DCHasty moved to Server 2008 DC Nucla added as a new Server 2008 DC, GCNucla added as a new Server 2008 DC, GC Limon added as a new Server 2008 DC, GCLimon added as a new Server 2008 DC, GC Plans for Rush to be moved to 2008 DC Plans for Rush to be moved to 2008 DC

soonsoon Firewalling DCs providing DNS services for Firewalling DCs providing DNS services for

PCI/DSS compliancePCI/DSS compliance


DNS changesDNS changes

Coming over the next few monthsComing over the next few months Why? Best practice; don’t answer DNS requests we Why? Best practice; don’t answer DNS requests we

aren’t authoritative foraren’t authoritative for Bring up 2 new DNS servers to handle non-Bring up 2 new DNS servers to handle non-

colostate.edu DNS queriescolostate.edu DNS queries eFort (server ready to go, deployment in a eFort (server ready to go, deployment in a

couple of weeks)couple of weeks) E7 EngineeringE7 Engineering

On-campus systems continue to point to On-campus systems continue to point to Rush/HastyRush/Hasty

Off-campus systems currently pointing to Off-campus systems currently pointing to Rush/Hasty will need to use their ISP’s DNS serversRush/Hasty will need to use their ISP’s DNS servers


Server 2008/Vista Server 2008/Vista TrainingTraining

Request for Server 2008/Vista Request for Server 2008/Vista trainingtraining Working with vendors to organize Working with vendors to organize

specific courses, negotiate pricing; will specific courses, negotiate pricing; will need to bid the training due to overall need to bid the training due to overall cost.cost.

Planning for FY10 – depends a lot on Planning for FY10 – depends a lot on response/commitment (budgets!)response/commitment (budgets!)



Student Email and Rampoint – Rusty Student Email and Rampoint – Rusty ScottScott

Migration UpdateMigration Update

Email migration completed over Spring BreakEmail migration completed over Spring Break Some small pockets of users remained behind Some small pockets of users remained behind

after migration, various reasons after migration, various reasons ACNS & Admissions communicating directly ACNS & Admissions communicating directly

with them to complete the transitionwith them to complete the transition Web space transitionWeb space transition

Students starting to use Google Apps ‘sites’Students starting to use Google Apps ‘sites’ Colleges are providing space for those who Colleges are providing space for those who

need something more flexibleneed something more flexible Simla scheduled to go offline June 1 Simla scheduled to go offline June 1


Rams Domain UsageRams Domain Usage


Rampoint UpdateRampoint Update

Assessment findings Assessment findings Low usage, high cost to upgrade and maintainLow usage, high cost to upgrade and maintain Extensive web development on campus, but Extensive web development on campus, but

not in Rampointnot in Rampoint RecommendationRecommendation

Ensure services currently available in Ensure services currently available in Rampoint have alternate entry points and Rampoint have alternate entry points and discontinue use of the Luminis platform by discontinue use of the Luminis platform by June 30, 2009June 30, 2009


Post-Luminis LandscapePost-Luminis Landscape Students – RAMwebStudents – RAMweb Faculty & StaffFaculty & Staff

Campus Administrative Portal (CAP)Campus Administrative Portal (CAP) https://cap.is.colostate.edu

ARIESwebARIESweb ariesweb.colostate.edu CAPCAP rampoint.colostate.edu

Group & File SharingGroup & File Sharing rampoint.colostate.edu


Rampoint – The New Rampoint – The New LookLook


Wrap-upWrap-up

Thanks to the campus community for Thanks to the campus community for your help and participation in these your help and participation in these projects!projects!

Questions are most welcomeQuestions are most welcome


Subnet Managers Subnet Managers Meeting 5/20/09Meeting 5/20/09

Microsoft / Autodesk Update – Diane Microsoft / Autodesk Update – Diane NorenNoren



Information SystemsInformation Systems5/20/095/20/09

UpdatesUpdates Campus CommunicationsCampus Communications Delphi Data WarehouseDelphi Data Warehouse cap.is.colostate.edu – Administrative cap.is.colostate.edu – Administrative

PortalPortal

Information SystemsInformation Systems


On July 1, 2009Delphi

Campus Communication

CAAGCAAG IACIAC UTCUTC Subnet ManagersSubnet Managers Kuali KickoffKuali Kickoff Various Mail List Servs Various Mail List Servs All Delphi users received targeted emailAll Delphi users received targeted email


Delphi Decommissioning

Access restricted 7/1/2009Access restricted 7/1/2009 CIS with restricted access until 8/1/2009CIS with restricted access until 8/1/2009 ODS will be the new Data WarehouseODS will be the new Data Warehouse Local Reporting such as MS-Access must be Local Reporting such as MS-Access must be

convertedconverted ODBC access is available to ODSODBC access is available to ODS Discoverer is a centrally supported reporting Discoverer is a centrally supported reporting

tooltool Training is available through CTSSTraining is available through CTSS


CAP Campus Administrative Portal

Live in Early February 2009Live in Early February 2009 Single Access Point for Single Access Point for

Administrative ApplicationsAdministrative Applications Single Sign-on Using EIDSingle Sign-on Using EID

Some Applications will require an additional Some Applications will require an additional Sign-onSign-on


Current CAP Applications

Appworx SchedulingAppworx Scheduling ARIES (Not AriesWeb) ARIES (Not AriesWeb) CIS (disappearing July 1, 2009)CIS (disappearing July 1, 2009) Discoverer Reporting against ODSDiscoverer Reporting against ODS FAMIS – Facilities ManagementFAMIS – Facilities Management KUALI TrainingKUALI Training Oracle HR and HR Self-ServiceOracle HR and HR Self-Service SciQuest (being integrated into Kuali)SciQuest (being integrated into Kuali) Vista Plus Report ManagementVista Plus Report Management


Future Applications

Sponsored Research – Before June 1Sponsored Research – Before June 1 AriesWeb – Before July 1AriesWeb – Before July 1 Kuali Production with Embedded Kuali Production with Embedded

SciQuest SciQuest

https://cap.is.colostate.eduhttps://cap.is.colostate.edu


Information SystemsInformation Systems

Questions?Questions?



Wrap-upWrap-up

Reminder of important dates:Reminder of important dates: June 1June 1stst – Simla services unavailable – Simla services unavailable July 1July 1stst – Rampoint transition / Luminis retirement – Rampoint transition / Luminis retirement July 1July 1stst – Delphi retirement – Delphi retirement July 1July 1stst – Kuali changeover – Kuali changeover July 1July 1stst – Older VPN clients blocked – Older VPN clients blocked September 1September 1stst – Modem pool retirement – Modem pool retirement

Next Meeting – Fall 2009, Time and Location Next Meeting – Fall 2009, Time and Location TBD.TBD.


DemoDemo

Demo – TimeClock application demoDemo – TimeClock application demo

S. Lovaas – L. KarbowskiS. Lovaas – L. Karbowski

Documents

Colorado State University1 Subnet Managers Meeting 5/20/09 Kuali update – T. Fluharty Kuali update – T. Fluharty NOC update – G. Redder NOC update – G