InfraSec 04.11.18 Minutes

Attending:

Marcin Hiolski, Anthony Marino, Alex Phistry, Heather O’Leary, Ateeq Rahman, Mike Kirda, Allen Randall, Ed Zawacki, Bala Ramaraju, Jelene Crehan, Dean Dang, Paul Neumann, Lalo Camacho, Vinay Surpuriya, Mark Goedert, Miguel Martin, Kirsten Pielstrom, Phil Reiter, Therese Molina, Lisa Blake, Shannon Redden, Dan Paz-Horta, Ron Fernandez, Chris Barton, Jason Maslanka, Andre Pavkovic, Doug McCarthy, Sarah Ritch, Ian Huggins, Ernesto Reyna, Matt Miller, Butch Zunich, Frank Cervone, Heather O’Leary

  • UI Systems Reports and Discussion Topics
    • Duo
      • A presentation on Duo, giving an overview of deployment, user numbers, and it is being used for, was given
      • Some issues that Duo users have encountered were gone over
      • The product vision was shared and a demo of Duo issues was given
      • Major activities planned to improve and expand the service were listed
      • Mentioned that students will be able to opt-in to Duo for services
      • The Duo project timeline and potential risks were shared
      • Discussion of concerns and next steps
      • Discussion of whether to create a formal project in ACCC
  • UIC Reports
    • Network Backbone Migration
      • The history of the network project, current status, and next steps was presented
      • The unification strategy was outlined and it was noted that all departments will be consulted before migrating
      • Noted that the networks team will also work around known conflicts
      • A brief overview of the migration timeline was given
      • The CDW project manager will be assisting with the migration and communications
      • Noted that at the end of migration, everything will be on private VLANs
      • Suggested that the goal is to have a private VLAN for each building
      • Suggested that the networks team hold a separate meeting with technical staff to go over details
    • Student Printing Service
      • The Ink cloud printing pilot was presented on
      • Student feedback was gone over and it suggested that there was not a clear preference for either Ink or Pharos
      • Based on support issues and pricing concerns, ACCC has decided not to go forward with Ink
      • A second phase pilot, using Wepa, will be started in AY19
      • Potential benefits of Wepa and the plan for deployment were outlined
      • Concern about printing in the library was expressed
    • IT Job Family
      • The history of the IT job families in HR was gone over and it was noted that documents are available in Box that would be posted on the HR website
      • It was asked that committee members review the documents and send feedback
  • UIC Discussion Topics
    • SEIM/Logging Requirements
      • Noted that three has been a discussion about gathering requirements for a tool that would allow logging
      • Noted that ACCC is using part of Urbana’s license to offer Spark as a service at UIC
      • Noted the importance of reports and the need for departments to generate their own
      • Discussion of department needs and what should be logged
      • The current Splunk contract and what is available were gone over
      • Noted that once it is deployed, departments will have access to the Splunk interface
      • Discussion of Splunk costs and charging
      • Concerns about the covered entity and how logging would affect those under it were expressed and clarification and communication were asked for
      • It was proposed to create a group to discuss these issues and report back to the committee
      • Further discussion of what should be required of the covered entity and other concerns
    • End-Point Management
      • A brief overview of the work done by the end-point management task force
      • Noted that many departments were using SCCM out of Urbana but it has not been considered a viable solution for UIC
      • Suggested that the HSCs and the subcommittee proposed KACE as a solution, but other options are still being considered in light of new information
      • Noted that there is a deadline to have an end-point management solution in place by August
      • Concern was expressed about getting a new system up and running by August
      • An alternative solution, using an improved version of SCCM, was gone over
      • Suggested making sure both solutions meet all the requirements of the task force, IT security policy, and HIPAA
      • Discussion of what is being done in Urbana’s Power Plant
      • Discussion of policy and whether it is possible to implement more than one solution
      • Further discussion of issues in the task force process
    • Shared Service Backup
      • Suggested that Medicine is working on a five-year solution that integrates with cloud for departments with larger server backup needs
      • Suggested that ADSM in ACCC is available for server backups
    • IPHEC AV Contract
      • Noted that the current contract will not be renewed and ends in June
      • Noted that there was follow up with IPHEC and Purchasing for more information
      • Some possible issues with the contract were outlined
      • Discussion of concerns about the AV contract
  • Announcements and Updates
    • FY19 ACCC Maintenance Windows
      • The scheduled maintenance windows were presented on and feedback was asked for
      • HSC calendars will be shared with ACCC for consideration
      • Noted that there is no perfect maintenance window
      • Noted that a calendar is available on the ACCC website and will FY19 window will be posted once finalized
  • Subcommittees
    • Rate and Funding
      • Suggested that a meeting be scheduled in the near future