Network Improvement Project

Download Report

Transcript Network Improvement Project

The Office of Information Technology
Campus Network
Upgrade
A three year plan facilitating increased reliability, functionality and
speed for the UTSA network.
Project Overview and Benefits
Process
Core - Build new 10 Gigabit per second (Gb/s) MPLS core capable backbone network
Backbone - Upgrade 20 Main Switches – Each typical campus building has 1 main switch providing backbone
connectivity to all areas of the building.
Access - Upgrade to top of rack 10 Gigabit per second (Gb/s) capable switch in each of the 150 building data closets
Benefits
Increased Speed
Ability to provide Gigabit speeds to the desktop - While the default connectivity provided to end users remains at 100
Mb/s, the upgrade has provided a 10 Gigabits per second (Gb/s) backbone connection to each network closet
within a building. This increased bandwidth will enable connection speeds of up to 1 Gb/s where required for
research or other needs.
Increased Flexibility
Traffic engineering – The new MPLS network will allow UTSA to determine specific paths for network traffic which will
provide greater security flexibility.
VLANs – With the current network design, departmental networks are limited to a geographic area and may span multiple
IP subnets. The new network will provide a wide range of options for extending networks across campus (VPLS, L3
VPN, etc.)
The Office of Information Technology
Deployment Year 1
Funding
$1,597,000.00 10/13/08
Status
Task
Date
Status
Product review and vendor selection
October 2008 - January 2009
Complete
Network Planning and Design
February 2009 - May 2009
Complete
New core network deployed in
parallel with existing UTSA network
June 2009
Complete
AET Building on new network
August 2009
Complete
JPL building on new network
November 2009
Complete
Science building on new network
December 2009
Complete
The Office of Information Technology
Deployment Year 2
Funding
$1,475,000.00 7/16/09
Status
Task
Date
Status
Physical Plant Building on new network
February 2010
Complete
Main Building on new network
March 2010
Complete
Bioscience Engineering Building on new
network
May 2010
In Progress
Business Building on new network
July 2010
Scheduled
University Center buildings on new
network
August 2010
Scheduled
Engineering Building on new network
September 2010
Scheduled
Arts Building on new network
October 2010
Scheduled
The Office of Information Technology
Deployment Year 3
Requested Funding
$1,485,000.00
Status
Task
Date
MS Building on new network
February 2011
HSS Building on new network
March 2011
BSA Building on new network
May 2011
University Heights Building on new network
July 2011
Monterrey Building on new network
August 2011
Frio Building on new network
September 2011
Durango Building on new network
October 2011
ITC Building on new network
October 2011
Status
The Office of Information Technology
The Office of Information Technology
Information Security
Initiative
Deployment Year 1
Funding $256,364
10/13/08

Senior Information Security Analyst Salary + benefits 2/1/09 – 8/31/09 - $42,000
 Assist the Information Security Officer (ISO) in developing and implementing tools and
applications needed to protect our networks and systems from internal and external
threats
 Lead of Ediscovery program



Information Security Trainer Salary + benefits 4/6/09 – 8/31/09 - $22,000
Computer systems to support the two new positions - $6000
Encase Acquition - $77,000
 EnCase is forensic software used by many law enforcement agencies and corporations
around the world to support civil/criminal investigations, network investigations, data
compliance and electronic discovery. We use the product to support the Legal Office’s
litigation cases. Currently we have 24 cases involving 186 personnel.

Rolled Over $110,013.00 to Year 2
The Office of Information Technology
Year 1 Training

Developed the ISO training program and presented
to 790 personnel
Outreach Activity
# of Sessions
Total Number of Attendees
New Employee Orientation
(Classroom Style)
22
217
Presentations to students (in class)
11
382
Presentations to UTSA community
6
125
Windows Administrator Class
7
35
Protecting UTSA Data
8
31
TOTALS
54
790
The Office of Information Technology
Deployment Year 2
Funding $284,328


Senior Information Security Analyst and Information Security Trainer Salary +
benefits - $134,000
Laptop Encryption Phase 1 - $42,000
 UTSA President issued a mandate that affects every campus laptop user: all universityowned laptops will be encrypted. This mandate is in response to UT System Security
Practice Bulletin #1 (PDF).
 Will increase our Information Security Program Index Score
 Over 1000 laptops encrypted in Phase I

Configuration and Asset Management Infrastructure for Window, Mac, and Linux
systems - $60,000
 Provides us the ability to manage the security of over 5000 desktops, servers and other
computers and to discover in detail what software is loaded and functioning on each
machine.
 Software is provided by UT System at no cost.
 Will increase our Information Security Program Index Score
The Office of Information Technology
Deployment Year 2 (Con’t)

McAfee - $38,000
 One year renewal for Anti-Virus software. Will be phased out by August 31,
2010. Is being replaced by Microsoft Forefront at no additional cost to the
university
 Provides protection to over 5000 desktops, laptops and servers from malware
introduced into those devices.

Saint - $30,000
 Provides UTSA a tool to conduct vulnerability assessments.
 Provides scans to meet Payment Card Industry (PCI) compliance. (still
negotiating)
 Assessments are required annually by the Department of Information
Resources and UT System
 Will increase our Information Security Program Index Score


Software Maintenance for EnCase - $12,000
Planning to roll over $75,000 to Year 3
The Office of Information Technology
Deployment Year 3
Requested Funding - $288,555

Senior Information Security Analyst and Information Security Trainer Salary +
benefits - $138,000

Software Maintenance for Encase ($12k), Saint ($3k), Arbor($5k) $20,000
Network Access Control (NAC) – $64,000

 Prevents computers from accessing the UTSA network until they’ve met certain
conditions. This protects UTSA from malware being introduced into our network.

Web Vulnerability Tool - $50,000
 Provide UTSA the ability to scan our web sites for vulnerabilities. This reduces the
chances of the web sites being hacked.
 Will increase our Information Security Program Index Score

Laptop Encryption - $26,000
 Phase II of Laptop encryption – Downtown Campus
 Laptop Encryption Tool for Macs
The Office of Information Technology