Wired PennNet: FY 2007 Subsidy Eligibility and Requirements

Eligibility for Credit for Wired Connectivity

All central pool classrooms and "public" labs and kiosks will receive credit for PennNet Central Service Fees (CSF) for wired PennNet connectivity for FY 2007. Only IP addresses associated with network jacks in "public" labs with computers attached, or those with kiosk computers attached, are eligible for CSF credit. IP addresses associated with "public network jacks," or those which are unsupervised network jacks in a public area with the intention of providing walk-up network service to the individuals in that public area, will not receive CSF credit.

How Credit is Issued

In mid-August ISC will bill CSF charges for all PennNet IP Addresses, including those used in labs. Credits will then be issued for IP addresses used in all labs designated as "public."

Public Lab Requirements

To receive CSF credit, your lab must meet each of the following requirements:

1. Your lab must be accessible to all valid PennCard holders, but must not be accessible to the general public. In cases where an extended customer base is served, such as the libraries, a process must be in place to limit or monitor access by the extended customer base. The lab must be open for a minimum of 8 consecutive hours at least 5 days per week, throughout the academic year. Summer hours may be less.
2. You agree to provide ISC billing at isc.upenn.edu with the name, location, telephone number, hardware type and peripherals for each lab by September 1, 2006, and agree to provide hours of availability no later than September 29, 2006.
3. You agree to post signage, if not already available, to direct people to your lab.
4. You agree to maintain a minimum 4-year equipment replacement cycle for all lab computers.
5. You agree to install and maintain recommended anti-virus and secure client software on all systems.
6. You agree to implement an approved authentication system and/or other security measures in compliance with guidelines established by Information Security. The recommended solution is to provide PennKey authentication using tickets from Penn's Kerberos realm to authenticate to a Windows 2000 domain. Another solution is to use the PAS-GINA tool. (Networking is currently developing a replacement for PAS-GINA; when announced, these requirements will be amended to reflect Networking's preferred authentication method.) If these are not possible, lab administrators are asked to implement other procedures to insure that access to PennNet or the Internet is restricted at all times to current faculty, staff or students, or for guests who are sponsored in writing by faculty or staff. Best practices include:

• Staffing public labs and requiring users to show an ID at sign-in
• Locating computers in high-traffic areas or positioning screens so that other users and passersby can easily view the screen
• Videocamera monitoring

Contact security@isc.upenn.edu for additional assistance.

7. You agree to offer the following software applications:

   Windows:

   Maple, plus Win software in the Windows supported products grid making sure to include:

   • Leash32 version 2.6.5 (Kerberos)
   • FileZilla 2.2.x
   • HostExplorer 11.0.0.x
   • SecureCRT 5.1.x (lab version)
   * not necessary to include: FileMaker Pro, Eudora, and Dreamweaver

   Mac:

   Maple, plus Mac OS software in the Mac OS supported products grid making sure to include:

   • Kerberos for Macintosh 5.x
   • Fetch 5.x
   • dataComet Secure 10.0.x for Mac OS X
   *not necessary to include: FileMaker Pro, Eudora, and Dreamweaver
   

8. (Optional) A recent poll was conducted on local support providers who support courseware. Software titles of note, below, were reported to be installed in both public and private computing labs. Although installation of these titles is not necessary for CSF credit, as lab managers you may want to consider offering these titles to better serve your users.
• Macromedia authoring tools (Dreamweaver, Flash, etc.)
• SimNet 3.x
• Matlab
• Stata

PLEASE NOTE: Due to the implementation of the critical host policy in January 2003, host profiles for terminal clients (dataComet Secure, HostExplorer, SecureCRT) have changed: vt100-based host profiles included in the product distributions no longer accept cleartext passwords.

Registering for Credit

If you have registered "public" wired IP addresses with ISC in the previous year, no action is necessary; those IPs will continue to be credited. To register new “public” lab IPs or to change the number currently being credited in one of your labs, please contact our Billing group at billing at isc.upenn.edu or 215.898.3377.

• Type of request (addition or deletion?)
• Lab location (building and room)
• List of IP addresses

If you have questions, contact Rob Short (rshort at isc.upenn.edu, 215.573.1263).

Thank you,

Mark Aseltine, Director, Technology Support Services, ISC
Mike Palladino, Associate Vice President, Networking, ISC
Rob Short, Sr. IT Support Specialist, Client Services Group, ISC

[ PAC-SIG Main Page ]