Educause Security Discussion mailing list archives

Re: Locally Administered servers


From: David Lundy <dlundy () PACIFIC EDU>
Date: Mon, 13 Mar 2006 10:20:42 -0800

We have three campuses and servers in IT units at each.  With rare exceptions we require servers that are not directly 
managed by our IT people to be colocated in our data center.  IT staff manages patching for most of these.  All 
externally visible IP/Ports must be approved by IT security before being opened through the exterior firewall.  While 
we don't have a release form for server administration, we do have an "open port request form" for requesting a port to 
be enable through the firewall.

David Lundy
Acting IT Security Officer
University of the Pacific
Stockton, CA
209-946-3951

bkarnold () CBU EDU 03/13/06 10:09 AM >>>
At least three departments here run their own servers.  They must obtain 
access to the internet as a server through our firewall which we 
control.  The main thing that we have as a security restriction is that 
they cannot operate an email server.  We require that all incoming emails 
come through a central server and that all outgoing emails leave through a 
central server.


At 11:57 AM 3/13/2006, you wrote:
Does your University allow local departments to administer their own 
servers?  Do you require them to sign any kind of release form?  Do you 
have any specific security policy for them? Thank you for your help.

Leo Tran, CISSP
Tulane University â€"
Phone: 504.988.8514




Brother Kenneth Arnold
System Administrator
Information Technology Services
Christian Brothers University
(901) 321-4333

Current thread: