FY 2004 Subsidy Requirements
To all lab managers:
All central pool classrooms and "public" labs and kiosks will receive credit
for PennNet Central Service Fees (CSF) for FY 2004. On August 15, 2003, ISC's
database will default to bill CSF
charges for all PennNet ports, including those in labs. However, we will
grant CSF credit approval for all labs designated as "public."
If you have registered "public" IP addresses with ISC in the previous
year, no action is necessary and those IPs will continue to be credited. However,
please contact billing@isc.upenn.edu or
call 215.898.3377 for any additions or deletions. ISC needs the following information:
- nature of change (addition or deletion)
- name of associated network jack (the port number)
- lab location
- IP address
NOTE: Beginning FY 2004, only network jacks in "public" labs
with computers attached, or those with kiosk computers attached, are eligible
for CSF credit. IP addresses associated with so-called "public network
jacks," or those which are unsupervised network jacks in a public area
with the intention of providing walk-up network service to the individuals
in that public area, will not receive CSF credit.
To receive CSF credit, you must accept responsibility for meeting the criteria
below:
- Your lab must be accessible to all valid PennCard holders, but must not
be accessible to the general public. In cases where an extended customer
base is served, such as the libraries, a process must be in place to limit
or monitor access by the extended customer base. The lab must be open for
a minimum of 8 consecutive hours at least 5 days per week, throughout the
academic year. Summer hours may be less.
- You agree to provide ISC with the name, location, telephone number, hardware
type and peripherals for each lab by August 23, 2003, and agree to provide
hours of availability no later than October 1, 2003.
- You agree to provide building signage, if not already available, to direct
people to your lab.
- You agree to maintain a minimum 4-year equipment replacement cycle for
all lab computers.
- You agree to install and maintain recommended anti-virus and secure client
software on all systems.
- You agree to implement an approved authentication system and/or other security
measures in compliance with guidelines established by Information Security.
The recommended solution is the PAS-GINA
tool that allows PennNet ID holders to authenticate and obtain guest
privileges on PCs running Windows NT Workstation or Windows 2000 Professional
and on Macintosh systems running OS X. In cases where use of the PAS-GINA
tool is not possible, lab administrators are asked to implement other procedures
to insure that access to PennNet or the Internet is restricted at all times
to current faculty, staff or students, or for guests who are sponsored in
writing by faculty or staff.
Best practices include:
- Staffing public labs and requiring users to show an ID at sign-in
- Locating computers in high-traffic areas or positioning screens so
that other users and passersby can easily view the screen
- Videocamera monitoring
Contact security@isc.upenn.edu for
additional assistance.
- You agree to offer the following software applications:
Mac:
Maple,
plus all Mac software in the supported
products grid:
http://www.upenn.edu/computing/product/
making sure to include: Kerberos for Macintosh 4.x, Fetch 4.0.3, dataComet
Secure 5.0.6 (10.0.x) for Mac OS 9 (Mac OS X);
not necessary to include: FileMaker Pro, Eudora Light, and Dreamweaver
Windows:
Maple, plus all Win
software in the supported
products grid:
http://www.upenn.edu/computing/product/
making sure to include: Leash32 version 2.1.2 (Kerberos), FileZilla 2.1.x,
HostExplorer 8.0.0.0, SecureCRT 4.0.x (lab version);
not necessary to include: FileMaker Pro, Eudora Light, and Dreamweaver
PLEASE NOTE: Due to the implementation of the critical host policy in January
2003, host profiles for terminal clients (dataComet Secure, HostExplorer, SecureCRT)
have changed: there are no longer any vt100-based host profiles included in
the product distributions which accept cleartext passwords.
If you have questions, contact Rob Short (rshort
at isc.upenn.edu, 215.573.1263).
Thank you,
Mark Aseltine, Director, Technology Support Services, ISC
Mike Paladino, Associate Vice President, Networking, ISC
Rob Short, Sr. IT Support Specialist, Client Services Group, ISC
[ PAC-SIG Main Page ]
|
