Information Technology News Archive

1996 - 2017

You are here: Home / Archives for Voice and Data Services

Voice and Data Services

Enhancing UCI’s Internet Firewall through “Server Registration”

by

In September 2007, NACS changed the configuration of the campus network to improve security.  UCI’s Internet firewall (a device that controls off-campus access to UCI computers) now denies inbound connections except the ones that have been approved in advance by faculty and staff. This protects most campus systems from unauthorized access while preserving off-campus connectivity wherever it is needed.

Directing Network Traffic

Directing Network Traffic

The process of authorizing specific off-campus connections is called “server registration” although it is not limited to servers in the traditional sense. If you own or manage a computer that needs to accept network connections from off campus, you can define what kinds of access are needed using a Web-based form. You can then manage all the machines you are responsible for, using a set of online tools.  Please check with your local support, because some units coordinate server registration on behalf of users.

Registration offers a simplified configuration process for common situations, such as remote access — secure shell (SSH) or Microsoft Remote Desktop — or systems that really are servers and are already protected by firewalls. If you manage a large number of systems, you can register them as a group by email request to security@uci.edu .

Since server registration was implemented last September, 4.5 billion unauthorized probes from off campus have been blocked, or roughly 12 million per day.

A more complete description of this service and how to use it can be found on the server registration web page.

What Are Little Networks Made Of?

by

You might think that network and telephone configuration for the newly expanded Student Center/Cross-Cultural Center would be relatively straightforward to design and install.  However, here are some metrics to demonstrate the magnitude of this project.

  • 12 communications rooms for telephone and network equipment and cabling
  • 40+ wireless access points
  • 70+ network switches
  • 120+ strands of optical fiber interconnecting the 12 communications rooms to other fiber junctions on campus
  • 2100+ inside-building cables for data and phone jacks – or almost 90 miles of cabling
  • 3050+ pairs of outside-building wires, over 470 miles, to connect the 12 communications rooms to the Central Plant communication core site.

NACS completed the design and implementation of the network and telephone infrastructure for the Student Center/Cross-Cultural Center expansion on time and within the budget allocated for telecommunications.

Server Registration

by

NACS is always looking for new ways to protect users on UCInet from network-based attacks. One upcoming strategy is to deny inbound connections to campus computers except the ones that have been approved in advance by faculty and staff. This will protect most campus systems from unauthorized access while preserving off-campus connectivity wherever it is needed.

The process of allowing authorizing specific off-campus connections is called “server registration” although it is not limited to servers in the traditional sense. If you own or manage one of the relatively few computers that needs to accept network connections from off campus, you can specify what kind of access is needed on the server registration form: http://www.nacs.uci.edu/network/servers/registration.php .

The form offers a simplified process for common situations, such as remote access (SSH & Remote Desktop Protocol), or systems that really are servers and are already protected by firewalls. If you manage a large number of systems, you can register them as a group by email request to security@uci.edu .

A more complete description of this service, and frequently asked questions can be found at: http://www.nacs.uci.edu/network/servers/ .

And You Thought You Take a Lot of Calls

by

You may not realize it, but NACS employs telephone operators as a part of the campus telephone service.

Two operators are on duty Monday through Friday from 8 am to 5 pm. The operators handle calls from campus telephones dialing “0” and calls to the University from all over the country and the world. The operators are the first contact the public has when calling the general telephone number listed for University of California Irvine (949-824-5011).

Not only do these professionals have to know a great deal about the units, services, structure, calendar, and activities of the University, they are called upon to handle an impressive number of requests.

In the course of a typical year, the operators handle almost 100,000 calls, with a peak day being almost 600 callers. Their goal is to help every caller quickly, and almost 80% of all calls are answered within ten seconds.

Should you ever need to reach someone by telephone while off campus, our friendly Campus Operators are ready to help you.

Network Upgrades

by

NACS regularly upgrades networking equipment around the campus, typically in a rolling series of school or departmental upgrades that take place over several years. In addition to these large upgrades–which may include replacing older wiring as well as equipment, campus-wide infrastructure needs maintenance and periodic replacement as well. In 2005, the core of the campus backbone was upgraded from one to ten gigabits per second (Gb/s). In a multi-year project begun the same year, NACS began replacing older routers/switches in the “distribution layer” with new equipment in many buildings around campus. (The distribution layer connects the networks in a building to the campus backbone). In addition, NACS has been working to replace all older edge switches in buildings. (Edge switches provide the connectivity from labs and offices to the building distribution switch).

Between July 2005 and June 2006 building distribution switches were replaced in Aldrich Hall, Berkeley Place South, Science Library, Social Ecology 2, Social Science Plaza buildings A and B, and Medical Surge 1. In addition, all of these buildings except Aldrich Hall and Med Surge 1 (which were upgraded the previous year) had their edge switches replaced with new equipment, greatly enhancing the performance of these networks for the occupants. Finally, a large number of new wireless access points have been added around the campus, including a major wireless upgrade in the Science Library. Many of these wireless upgrades have been the result of a networking survey NACS conducted last year.