Transcript Setting the rates

NETWORK PLANNING TASK
FORCE FY’07
“Setting the Rates”
11/20/06
1
Meeting Schedule – FY ‘07
■
■
Meetings 1:30-3:00pm, 3401 Walnut Street
Fall Meetings
■
■
■
■
■
■
■
■
■
Intake and Current Status Review – August 21
Agenda Setting & Focus Group Planning – September 18
Focus Group – October 04
Security Strategy Discussions – October 16
Focus Group – October 17
Network Strategy Discussions – October 30
Strategy Discussions – November 6
Final Meeting-Prioritization /Rate Setting – November 20
Focus Group Feedback – December 4
2
Agenda
■
■
■
FY ’07 strategic topics summary
Central authorization system
Financial summary
■
■
■
■
Network financial health
Setting the CSF Rate
Other proposed rates
Status of New Funding Model
3
FY ’07 Strategic Topics
■
■
Building uplinks: gigabit and redundant links
Network access control
■
■
■
■
■
■
■
Scan and Block
PennNet Gateway (802.1X)
Campus-wide wireless
VoIP
In building cellular coverage
Security initiatives
Central authorization system
4
Backbone Infrastructure
5
Building Uplinks: Gigabit and Redundant
Links
■
Goal
■
■
Status
■
■
■
■
■
2 gig links per building/subnet
18 gig only
6 gig/100Mbps
17 dual gig
We have a long way to go in reaching this goal.
The lion’s share of the CSF funding is going to
support this effort.
6
Security Initiatives
FY07
■Create
documentation
for recommended
security configurations
for most common
devices
■Evaluate 3rd party
mobile data security
tools and services.
■Develop a secure
remote access strategy.
■Develop a strategy for
protecting mobile
devices, poss. to
include key recovery
FY08
■Pilot
a central
file service (e.g.
WebDav).
■Pilot mobile
data security
tools as
appropriate
■Design and
implement
secure remote
access pilot.
■Develop
decentralized
IDS strategy.
FY09
■In
policy,
require
encryption of
confidential
data.
■Roll out
WebDav,
secure remote
access, mobile
security tools
as approp.
■Design and
pilot
decentralized
IDS.
Beyond
■In
policy,
forbid
confidential
data on
portable
devices without
a waiver.
■Universal
access control:
authentication,
scan and block
■Perimeter
firewall
7
Central Authorization System
Proposal for NPTF funding
November 2006
8
Central AuthZ System
■
■
■
■
Build a central authorization system that could be
utilized by applications across the University
Utilize Penn Community data and school/center
created lists to facilitate authorization decisions
Allow Schools and Centers to build and reuse
authorization information across applications
Provide sophisticated group management
capabilities, such as subgroups and composite
groups, to support access management needs.
9
Central AuthZ System: Benefits
■
■
■
■
Facilitate consistent application of University business rules
■ Managed through a common UI and standard API
Streamline maintenance of authorization data
■ Bring scattered redundant groups together for re-use
■ Allow useful actions on these groups -- group math, group
nesting, exclusion criteria
Leverage Penn Community data for accurate, up to date
authorization decisions
■ Can leverage existing attribute information
Support the creation of new groups
■ By schools, departments, and individuals!
■ Distributed/delegated model of control
10
Central AuthZ System: Use Cases
Use Case
Existing Means
Central AuthZ
Can't just remove from authentication
system because the person may still
need access to benefits and there may
be payroll obligations.
Employee
Termination
New BA is Hired
Faculty in SOM
Who are a Principle
Investigator
But not in genetics
Spend hours tracking down and
removing access to applications and
systems on an individual basis
May take up to two weeks for the person
to be completely set up to use all the
appropriate applications
Remove the person or blacklist them in the
central authorization system for services no
longer used.
Cumbersome to develop a means to
compile and maintain a list from
disparate sources
Use of the group and exclusion features of the
central Authorization system allow this to be
easily done and maintenance is automated.
A BA can be set up in a few simple steps.
11
Central AuthZ System: Current
Implementation Base
■
■
More than 80 institutions are currently evaluating or implementing
central authorization technology.
Partial listing of where systems are in production or nearing a
production cutover.
■
■
■
■
■
■
■
■
■
■
■
Stanford
Brown
Cornell University
Duke University
National Cancer Institute (caBIG - Cancer BioInformatics Grid)
South China University of Technology
University of Bristol
University of Chicago
University of Kansas
University of Southern California
University of Wisconsin
12
Central AuthZ System: Costs
■
■
ISC would fund initial development and
deployment (~$150,000)
Proposal for $110,000 annual ongoing
funding from NPTF (1 FTE + HW & facilities)
■
Estimated at $.18/IP address/month
13
Central AuthZ Systems
■
Clarify concerns and discuss issues
14
FY ’07 – ’12 Network Financial Health
DIRECT CHARGES
TELECOMMUNICATIONS
CENTRAL SERVICE FEES
NETWORK INSTALLATIONS/PROJECTS
WALLPLATE CONNECTIONS
EMAIL, WEB HOSTING, VIDEO
MAGPI SERVICES
WIRELESS
OTHER (SLAs)
SUBTOTAL DIRECT CHARGES
FY'07 Budget FY'08 Budget
$ 9,260,000 $ 9,090,000
$ 6,180,000 $ 6,550,000
$ 1,500,000 $ 1,500,000
$ 2,820,000 $ 2,950,000
$
840,000 $
890,000
$ 1,720,000 $ 1,920,000
$
355,000 $
355,000
$
390,000 $
390,000
$ 23,065,000 $ 23,645,000
FY'09 Budget FY'10 Budget
$ 8,810,000 $ 8,500,000
$ 6,890,000 $ 7,210,000
$ 1,500,000 $ 1,500,000
$ 3,100,000 $ 3,220,000
$
940,000 $ 960,000
$ 2,120,000 $ 2,320,000
$
355,000 $ 355,000
$
390,000 $ 390,000
$ 24,105,000 $ 24,455,000
FY'11 Budget
$ 8,250,000
$ 7,550,000
$ 1,500,000
$ 3,340,000
$ 960,000
$ 2,420,000
$ 355,000
$ 390,000
$ 24,765,000
FY'12 Budget
$ 8,100,000
$ 7,910,000
$ 1,500,000
$ 3,460,000
$
990,000
$ 2,520,000
$
355,000
$
390,000
$ 25,225,000
GENERAL FEE - PVN
$
$
$
$
TOTAL INCOME
TOTAL EXPENSE
$ 23,678,000
$ 23,728,000
$ 24,271,000
$ 24,521,000
$ 24,743,000
$ 24,443,000
$ 25,106,000
$ 25,806,000
$ 25,429,000
$ 25,629,000
$ 25,902,000
$ 25,202,000
Cumulative (Surplus) / Deficit
$
$
$
$
$ 1,000,000
$
613,000
50,000
$
626,000
300,000
638,000
-
$
651,000
700,000
664,000
677,000
300,000
15
FY ’08 Revenue Sources
2%
TELECOM LINES
8%
3%
VOICEMAIL
20%
VOICE ALLOCATION
LONG DISTANCE CALLING
12%
4%
6%
10%
8%
24%
3%
TELECOM INSTALLATIONS
CENTRAL SERVICE FEES
NETWORK INSTALLATIONS
WALLPLATE CONNECTIONS
EMAIL, WEB HOSTING, VIDEO
MAGPI SERVICES
OTHER
16
Penn iPhone – Projected Costs
Centrex line/VOIP line
MBS Set (1) w/maintenance
Voicemail
subtotal/user
Usage - Local ($0.06/call)
Usage - Long Distance ($.10/min)
TOTAL
Conversions
Traditional Phone
$15.60/month (2)
$10.03/month (2)
$9.75/month (2)
VOIP Pilot
FY '07 VOIP
$15.60/month
$17.60/month
Free for 6 months
$8.00/month
Free for 6 months
$9.75/month (2)
FY '08 VOIP
_______________
$35.38/month
$15.60/month
$35.35/month
$32/month
$3.00
$3.00
$3.00
$3.00
$3.00
$3.00
$1.50
$1.50
$41.38/month
$21.60/month (4)
$41.35/month
$35/month
N/A
$80 waived (3)
$80 waived (3)
$80 waived (3)
Assumptions
1. Meridian Business Set one-time cost of $368 is depreciated over a 60-month period for this comparison
2. 30% allocation is included
3. Waived until end of FY ’08
4. All pilot rates end on June 30, 2007.
5. Price reduction in FY ’08 and beyond possible as cross subsidy for network is reduced.
6. Cross-subsidy should be eliminated by FY ’10 or sooner if possible.
17
FY ’07 Current Central Service Fee Rate
FY'07 CSF BUNDLE OF SERVICES
CAMPUS BACKBONE & FIBER/CABLE MANAGEMENT
INTERNET/ BAND. MANG./ /NET SECURITY
INTERNET2
NOC/NETWORK MANAGEMENT/EXT HOURS
WWW
INFRA SOFT SVS/AUTHEN/AUTH
NETNEWS
MAIL RELAY, LISTSERV, DIRECTORY (NISC)
CENTRALIZED WIRELESS AUTH
PENN COMMUNITY BASELINE
TSS WIRELESS SUPPORT
SECURITY TOOLS, EDUCATION & RESPONSE
PENN COMMUNITY ADDITIONAL SUPPORT
PENN COMMUNITY "ALWAYS AVAILABLE"
Computer H/S, OS ISC Staff
Main, Licenses
$
$
$
$
$
$
$
$
$
$
$
$
$
$
1,054,500
807,000
242,000
164,000
119,000
131,000
13,500
59,500
20,000
$
$
2,610,500
VULNERABILTY SCANNING (2x yr.)
PENNKEY SCHOOL SUPPORT
TOTAL
FY'07 PROJECTED AVG IP ADDRESSES
FY'07 RATE
PROJECTED 100MBPS BANDWITH SURCHARGE FUNDING
FY'07 FINAL RATE
$ 779,886
$ 321,496
$ 121,448
$ 317,458
$ 177,463
$ 627,599
$
18,303
$ 212,556
$ 165,240
$
51,500
$
20,000
$
98,200
$
50,000
$
10,000
$
25,000
$
56,000
$ 3,052,149
Total
$ 1,834,386
$ 1,128,496
$ 363,448
$ 481,458
$ 296,463
$ 758,599
$
31,803
$ 272,056
$ 165,240
$
51,500
$
20,000
$
98,200
$
50,000
$
30,000
$
25,000
$
56,000
$ 5,662,649
42,700
$
11.05
$
96,000
$
10.86
18
FY ’08 Projected Central Service Fee Rate
FY'08 PROJECTED
CSF BUNDLE OF SERVICES
CAMPUS BACKBONE & FIBER/CABLE MANAGEMENT
INTERNET/ BAND. MANG./ /NET SECURITY
INTERNET2
NOC/NETWORK MANAGEMENT/EXT HOURS
WWW
INFRA SOFT SVS/AUTHEN/AUTH
NETNEWS
MAIL RELAY, LISTSERV, DIRECTORY (NISC)
CENTRALIZED WIRELESS AUTH
Computer H/S, OS ISC Staff
Main, Licenses
$
$
$
$
$
$
$
$
$
1,837,000
794,375
202,480
121,107
123,644
153,816
13,500
69,984
50,000
$
20,000
$
3,385,906
CONSULTING TO SCHOOLS/CENTERS
PENN COMMUNITY BASELINE
TSS WIRELESS SUPPORT
SECURITY TOOLS, EDUCATION & RESPONSE
PENN COMMUNITY ADDITIONAL SUPPORT
PENN COMMUNITY "ALWAYS AVAILABLE"
VULNERABILTY SCANNING (2x yr.)
PENNKEY SCHOOL SUPPORT
AUTHORIZATION NEW IN FY'08
TOTAL
FY'08 PROJECTED AVG IP ADDRESSES
FY'08 RATE BEFORE BANDWIDTH SURCHARGE
PROJECTED BANDWITH SURCHARGE
FY'08 DRAFT RATE
Telecommunication Subsidy (PHASED OUT BY FY'10)
Revised Draft Rate FY'08
$ 1,166,305
$ 341,890
$ 194,714
$ 389,250
$ 171,356
$ 669,657
$
18,303
$
93,781
$ 100,000
$ 173,437
$
51,500
$
20,000
$
98,200
$
50,000
$
10,000
$
25,000
$
56,000
$ 110,000
$ 3,739,393
Total
$ 3,003,305
$ 1,136,265
$ 397,194
$ 510,357
$ 295,000
$ 823,473
$
31,803
$ 163,765
$ 150,000
$ 173,437
$
51,500
$
20,000
$
98,200
$
50,000
$
30,000
$
25,000
$
56,000
$ 110,000
$ 7,125,299
49,811
$11.92
$
72,000
$11.80
$ 500,000
$10.96
19
FY’08 Proposed Rates
SERVICE
FY' 07 RATES
(Monthly)
FY'08 PROPOSED RATE COMMENTS
(Monthly)
NETWORK
Central service fee
$
10.86
$
10baseT port charge
$
6.03
$
6.03
100baseT
$
8.03
$
7.03 Rate reductions starting 1/1/07
1000baseT
$
100.00
$
30.00 May not be immediately avilable in all
buildings. Infrastructure builds could delay
implementation several months.
$
27.00
$
27.00
WIRELESS
Wireless Access Point Support
PHONES
Existing services (lines, set,
usage, long distance)
Phone (VoIP)
VIDEO
Penn Video Network
Same as FY'06
No rate increases.
See page 17.
$
10.96 0.9% increase
See page 17.
14.00
$
Video Production, Conferencing, Some rates increased 10% No rate increases.
Streaming
14.50 3.4% increase for non-residential
customers. Vendor costs for programming
went up 8%.
Optional service. Rates stil well below
external market.
20
New Funding Model
■
Current Status
21
Next Steps





NPTF makes rate recommendations.
Rate recommendations presented to Provost
and EVP.
Final FY ’08 rates established.
Rates sent to ABA in late December.
Rates published in Almanac on December
20th.
22