NEW APPLICATION QUES TIONNAIRE GENERAL APPLICATION INFORMATION Name of Application: Associate Project Name: Primary IT Contact: Primary User Contact: New Application? This is a: An add-on to an existing application? Please list the application and its dependencies: Migration of an existing application (moving from old system or old platform). Please attach the migration plan. No Does the application require connections or interfaces to or from other existing systems? ( I.e. Data from another system, FTP file transfers, etc .) Yes – Please identify: No Are there any known/outstanding application issues or compatibility problems? Yes – Please elaborate: What is the proposed installation, testing and go-live timeframe? No Yes Could the application pull from existing data stores? Will this server house sensitive information (i.e. SSNs, credit card numbers student grades, PHI, etc…)? No Yes – Please explain: Is stored information encrypted? No Yes – Please explain: Is data encrypted in transmission? No Yes – Please explain: The following questions are required for New Applications Only. What department(s) will be served by application? What is the expected number of end-users? Named: Concurrent: What is the expected number of administrative users? Please describe the expected number and type of transactions. Is the application related to an existing application? VENDOR INFORMATION Vendor Name Contact Information Support Contact Information What is your customer base, i.e. Industry, number of customers, etc.? How large is your support staff? What support options are available? Hours of operation? Please provide system\application documentation. IT Network Services University of Toledo Page 1 No Will this server require vendor management via a Vendor VPN account or VPN tunnel? Yes Do we have a valid contract/business agreement with the vendor concerning the security of UT data? No Yes No Is this application supported directly or exclusively by the vendor? Yes If so, does the application phone home when something breaks? No Yes Server/Storage Hardware Requirements What are the minimum and recommended hardware and software specifications? Does the vendor support: VMware Blade Hardware Please list any unique hardware requirements? ( I.e. dongles, keys, phone lines, etc.) If this application grow after it is fully configured and in production, please list the projected network and storage needs for the next 2 years? Does the vendor support: SAN - ISCI How many luns need to be created and what are the specifications for them SAN - Fiber How many ports will the server require (Standard is two ports per server)? Local Disk Are there any specific drive partitioning requirements No Are there any extended data retention requirements? Yes How long does data need to be saved when the system or application is retired? Operating System and & Software Requirements What Operating Systems and versions are supported? Web Client What type of user interface does the application utilize Client/Server What services will the application require? What versions do you support? What type of files will you be serving? Web Services What type of authentication will you need? How much disk space will need to be allocated for the web files? Do you support SSL? No Yes What is it used for? File Share What type of users will need to access it? How much disk space will need to be allocated for the file share? IT Network Services University of Toledo Page 2 List the database versions that are compatible? Database Reporting What SQL Server services are required: Integration Services Analysis Services Database Does the application require the default instance of SQL Server? No Yes Can the database be on a separate physical server from the application server? No Yes How much disk space will need to be allocated for the database? FTP Messaging Printing Other Is any third party software required? How are application patches handled No Yes – Please identify: What is the typical patching methodology? Are all upgrades and patches certified, meaning there are no “test” or “beta” objects in the release? Does the vendor approve or disapprove OS patches? No No Yes Yes – How will we be notified? What files, services, and registry entries are added to the windows operating system as a result of installing the software? Are there any log files generated by the software and where are they stored on the server? How are user accounts handled with the application (Active Directory integrated, Local Database, etc)? Does the application require any unique features, such as requiring a user account to be logged in at all times? No Yes – Please Explain: Which is support and\or recommended? Cluster Does the application require high-availability features? No Yes Load Balancing Replication Other IT Network Services University of Toledo Page 3 NETWORK INFORMATION What Ethernet Ports are needed? iSCSI interface Quantity Public client interface Quantity Cluster interface Quantity Other Quantity No Is external access to this server required (i.e. from outside the UT Network boundaries)? Is access authenticated and is authentication encrypted? No Yes Yes Please explain what users will need access (i.e. UTAD users, public, etc…) Will services be made off-campus now or in the future? No Yes Will server need ssl offload services? No Yes Will server need to be firewalled off from rest of production network? No Yes How will this be accomplished? What ports/protocols need to be opened? BACK-UP / DISASTER RECOVERY INFORMATION What is the Recovery Point Objective (RPO) for this server (i.e. how much data could be lost if it had to be recovered from tape)? What is the Recovery Time Objective (RTO) for this server (i.e. how long could business operations be sustained while waiting for the server to be recovered)? Days Hours Days Hours Note: If this is a critical clinical application that has recoverability requirement of 24 hours or less please provides vendor approved high availability options that would utilize a dual data -center topology. Will a standard backup consisting of a nightly incremental backup of the entire file system meet system needs? Yes No Identify specific back-up needs. Note: Windows clients include a system state backup. If a direct database backup is required please include database server information. Are there any vendor supported options for disaster recovery? No Yes Please identify and provide details Please provide vendor best practice information and guidelines for data loss prevention and disaster recovery. Are special backup agents, other than TSM, required? No Yes – Please Indentify: Please provide system and application information that could be used to properly add systems health and availability monitoring alerting. Information gathered will be used to configure our monitoring systems which will send pages and alert emails to systems suppo rt personnel as issues are detected. This will help to ensure systems availability and functionality as well as capturing historical performance data that could be used to diagnose issues. FOR INTERNAL NETWORK SERVICES USE ONLY Identify public interface network needed. (i.e. 2.x, 80.x, 82.x) How many ip’s will be needed on which networks and which mac addresses will be seen on each network? IT Network Services University of Toledo Page 4 Which rack in which data center is server located in? If HSC data center which switches and ports will need to be activated? What are the host names Are DNS Alias needed? Have remedy asset, vpn, firewall, etc. requests been submitted? Who will be the primary contact for this host if additional information is needed? Will this host require a high volume of ip addresses as in the case of a VM server such as the virtual desktop environment? What is the primary function of this server and what subnet/network does it make most sense for this to be placed on? If hardware has been identified to provide complete remedy quick asset record information (i.e. make, model, type, Mac, serial, etc.) Please identify the servers that will need backup clients installed listing install base OS information and number of cpu cores as needed. Note: The IBM Tivoli file system client (TSM) is licensed by cpu core. All Virtual's are covered by the physical server cpu license and do not need to be individually licensed. If this system is dependent on other systems? No Yes Please identify and provide details on approved recovery requirements. SIGNATURES Filled out By: Reviewed By: Date: Date: IT Network Services University of Toledo Page 5