Subnet Managers Meeting
5/20/09









Kuali update – T. Fluharty
NOC update – G. Redder
Security update – S. Lovaas
Windows Group update – J. Volesky
Student Email / Rampoint – R. Scott / R. Miotke
Microsoft / Autodesk update – D. Noren
Information Sys Update – K. Johnston
Wrap-up
TimeClock Demo afterwards
Colorado State University
1
The New KFS
FRS
CIS
SciQuest
CashNet
(Department
Deposits)
July 1, 2009 for FY 2010
KFS
All functionality for these systems will
move into KFS for FY 10
Single Sign-on to KFS via Campus Administrative Portal
KFS Strategy

As few changes as possible:
•
7 digit account number – just added a 0 to the end
•
General and Sub Ledgers merged into one account
•
First two digits of account number will represent fund
group
•
Removed duplication in subcode numbering scheme
•
Fund group field is alpha only – renamed fund groups
Account
Structure

FRS
General Ledger (GL) Acct


(022376)
(2237600)
KFS
Account
Sub Ledger (SL) Acct




(223760)
077215/772150
013000/134862
026020/260200
7721500
1348620
2602000
Subcode
Structure

FRS
Account Control (GL)


(1437, 2020)
Subcode

(SL)
KFS
Object Code (1437,2020)
(4380,6600)
(0600, 4000)

2111 Payable to Stu/Custm
2111 Adm Pro Salary
2111 Pay to Stu/Custm
5111 Adm Pro Salary
Subcode
Structure
Object Code
Range

Type
Example Object Codes
1XXX
Asset
Accounts Receivable (1437)
2XXX
Liability
Other Payables (2101)
3XXX
Fund Balance
Fund Balance (3000)
4XXX
Revenue
Other Sales + Service (4380)
5XXX –
9XXX
Expense
General Supplies 6201
Office Supplies 6208
Subnet Managers
5/20/2009

NOC update – Greg Redder
Colorado State University
7
NOC Agenda











Traffic Stats
Wireless upgrades/status
NTP
Modem pool
Border router upgrades
Core switch upgrades
Edge switch upgrades
VPN Client upgrades
Secure Meeting and Video Conferencing
IPV6
Security: Passwords and Tokens, Sensitive info scanning,
Phishing notifications scheme
Colorado State University
8
Traffic Stats
(All CSU + FCCN)
Colorado State University
9
Traffic Stats
(CSU Main Campus)
Colorado State University
10
Wireless upgrades/status

UTFAB:
 Morgan/Clark – upgraded to N and saturated
 Approved $200K: Engineering, Chemistry, Education, Eddy

(Will require existing switch ports.)

Fill holes in Plant Sciences (pending)
 Other holes?
Added wireless:
 CMAPP (done)
 GSB (pending)

Easy Access (csu-net)


These are 10.84 addresses on campus
Colorado State University
11
NTP



Dual stratum 1 servers: main campus and
foothills campus
Load balanced: redundancy, reliability and
efficiency
Pending move of ntp.colostate.edu
officially – currently this points to yuma.
Colorado State University
12
Modem Pool


Going away September 1
Notifications sent out to subnet managers,
admin assistants and customers.
Colorado State University
13
Border Router Upgrades

Current
Colorado State University
14
Border Router Upgrades

Planned
15
Core Switch Upgrades

Previous
Colorado State University
16
Core Switch Upgrades

Current
Colorado State University
17
Edge Switch Upgrades



Bug in older code on 5300s
Many 5300s behind in code versions
Code upgrade, reboot, code upgrade
reboot (150+ switches)
Colorado State University
18
VPN Client Upgrades
(Use SSL Gateway!)






Versions prior to 4.8.01 have privilege escalation issue.
Currently provided version is: 5.0.03.0530
Testing 5.0.05 (looking for volunteers!). This version
works better with Vista!
No Vista 64-bit support with VPN client EVER per Cisco!
Idle timeout on VPN set to match SSL: 1 hour idle, 8
hours total.
Host checking to be tested on VPN later this Summer.
Colorado State University
19
VPN Client Upgrades
Schedule



May/June: test new client
June 15 – e-mail individuals still using clients
older than 4.8.01 advising them of July 1
deadline. Encourage use of SSL gateway.
July 1 – Block clients earlier than 4.8.01.
Colorado State University
20
Secure Meeting & Video
Conferencing



Reminder: Secure Meeting (WebEx)
feature of the SSL gateway: FREE!
VC rooms available at various locations on
campus: USC, Clark, Library, etc.
Contact: noc@colostate.edu
Colorado State University
21
IPV6
(2002:8152:674f::8152:674f)




Issues we’ve seen – mostly with regards to DNS
“6to4” tunneling
FRGP support IPV6 (unicast only) to I2
Plans
 NOC to test a small deployment
 Training to subnet managers
 Purchase of only IPV6 capable equipment
 No immediate plans for support of IPV6 on campus
until testing completed.
Colorado State University
22
Subnet Managers Meeting
5/20/09
Security update – Steve Lovaas
Colorado State University
23
Security: Passwords & Tokens




Auto-Login to Outlook / Exchange
Screen Locking
Long password support
PCI Remote Access


Tokens
New SMS Feature
Colorado State University
24
Security: Sensitive Info Scanning



May 15th deadline was difficult
Spider 3 vs. 4 experiences?
Please let me know when you’ll be done
Colorado State University
25
Security: Phishing Notifications

Current practice




Effective?
Efficient?
Convienent?
Broader coverage?
Colorado State University
26
Subnet Managers Meeting
Windows - Volesky
Colorado State University
27
COLOSTATE Domain Controllers





Hasty moved to Server 2008 DC
Nucla added as a new Server 2008 DC, GC
Limon added as a new Server 2008 DC, GC
Plans for Rush to be moved to 2008 DC soon
Firewalling DCs providing DNS services for
PCI/DSS compliance
Colorado State University
28
DNS changes

Coming over the next few months
 Why? Best practice; don’t answer DNS requests we
aren’t authoritative for
 Bring up 2 new DNS servers to handle noncolostate.edu DNS queries
 eFort (server ready to go, deployment in a couple
of weeks)
 E7 Engineering
 On-campus systems continue to point to Rush/Hasty
 Off-campus systems currently pointing to Rush/Hasty
will need to use their ISP’s DNS servers
Colorado State University
29
Server 2008/Vista Training

Request for Server 2008/Vista training


Working with vendors to organize specific
courses, negotiate pricing; will need to bid the
training due to overall cost.
Planning for FY10 – depends a lot on
response/commitment (budgets!)
Colorado State University
30
Subnet Managers Meeting
5/20/09
Student Email and Rampoint – Rusty Scott
Colorado State University
31
Migration Update



Email migration completed over Spring Break
 Some small pockets of users remained behind after
migration, various reasons
 ACNS & Admissions communicating directly with them
to complete the transition
Web space transition
 Students starting to use Google Apps ‘sites’
 Colleges are providing space for those who need
something more flexible
Simla scheduled to go offline June 1
Colorado State University
32
Rams Domain Usage
Colorado State University
33
Rampoint Update

Assessment findings



Low usage, high cost to upgrade and maintain
Extensive web development on campus, but
not in Rampoint
Recommendation

Ensure services currently available in
Rampoint have alternate entry points and
discontinue use of the Luminis platform by
June 30, 2009
Colorado State University
34
Post-Luminis Landscape


Students – RAMweb
Faculty & Staff
 Campus Administrative Portal (CAP)
 https://cap.is.colostate.edu
 ARIESweb
 ariesweb.colostate.edu
 CAP
 rampoint.colostate.edu
 Group & File Sharing
 rampoint.colostate.edu
Colorado State University
35
Rampoint – The New Look
Colorado State University
36
Wrap-up


Thanks to the campus community for your
help and participation in these projects!
Questions are most welcome
Colorado State University
37
Subnet Managers Meeting
5/20/09
Microsoft / Autodesk Update – Diane Noren
Colorado State University
38
Information Systems
5/20/09

Updates



Campus Communications
Delphi Data Warehouse
cap.is.colostate.edu – Administrative Portal
Colorado State University
39
Information Systems
On July 1, 2009
Delphi
Colorado State University
40
Campus Communication







CAAG
IAC
UTC
Subnet Managers
Kuali Kickoff
Various Mail List Servs
All Delphi users received targeted email
Colorado State University
41
Delphi Decommissioning







Access restricted 7/1/2009
CIS with restricted access until 8/1/2009
ODS will be the new Data Warehouse
Local Reporting such as MS-Access must be
converted
ODBC access is available to ODS
Discoverer is a centrally supported reporting tool
Training is available through CTSS
Colorado State University
42
CAP



Campus Administrative
Portal
Live in Early February 2009
Single Access Point for Administrative
Applications
Single Sign-on Using EID

Some Applications will require an additional Sign-on
Colorado State University
43
Current CAP Applications









Appworx Scheduling
ARIES (Not AriesWeb)
CIS (disappearing July 1, 2009)
Discoverer Reporting against ODS
FAMIS – Facilities Management
KUALI Training
Oracle HR and HR Self-Service
SciQuest (being integrated into Kuali)
Vista Plus Report Management
Colorado State University
44
Future Applications



Sponsored Research – Before June 1
AriesWeb – Before July 1
Kuali Production with Embedded SciQuest
https://cap.is.colostate.edu
Colorado State University
45
Information Systems
Questions?
Colorado State University
46
Wrap-up

Reminder of important dates:







June 1st – Simla services unavailable
July 1st – Rampoint transition / Luminis retirement
July 1st – Delphi retirement
July 1st – Kuali changeover
July 1st – Older VPN clients blocked
September 1st – Modem pool retirement
Next Meeting – Fall 2009, Time and Location
TBD.
Colorado State University
47
Demo
Demo – TimeClock application demo
S. Lovaas – L. Karbowski
Colorado State University
48