Adams State - checoweb.org · Adams State Server Team Investigation/possible transition to Gmail...
Transcript of Adams State - checoweb.org · Adams State Server Team Investigation/possible transition to Gmail...
Adams State
Server Team
Investigation/possible transition to Gmail for faculty/staff
2x200Mb Internet links with different providers using Quagga BGP with full tables on highly available linux router firewall.
Public IPv6 block being advertised, www.adams.edu answers on IPv6.
CEPH storage cluster for file serving and "cloud" access to home and shared space.
Still using Linux KVM for virtual servers, now on CEPH shared storage, still using VMWare for Banner systems.
Workstation cloning and management with Microsoft SCCM.
Obtained 2048 more IPv4 addresses for Resnet directly through ARIN.
Snowden settings for SSL on web servers (forward secrecy, 256 bit, discrete logs vs elliptic curve) just for fun.
Establishing secondary data center for disaster recovery.
Power metering in primary data center for each phase.
Banner
In middle of search committee for Team Lead
Ellucian Mobile Server being built
Blackboard integration issues since last upgrade to BB
Web Time Entry for workstudy timesheets
Various payroll, finance and fin aid upgrades
Banner XE, will be building test servers soon, still unclear what hardware requirements will be
Converting SQRs to Perl/Python to avoid pending SQR upgrade cost
Support Services
Implemented Impulse Point as a replacement for NAC on wireless, still using Bradford for the small number of wired connections in ResNet
Upgrading labs/TEC classrooms- went to Dell all-in-one as a test-Model 9010
Transitioned from Pcounter to papercut
RT ticketing system, survey integration
Investigating Crestron vs Extron
Network/Telecom team
VoIP
Evaluating Aruba redundant pair to replace HP TMS module
ASU and KSPK partnership for sports broadcasting
Upgraded wireless service to our faculty drive, hi-rise apartments next
Mac Gray Internet-based pay laundry services
East Campus now houses HPPE, will become swing space for RH construction
Organizational
Cheap in-house remodeling options, hopefully state funded in 3-5 years
Electronic Security Systems policy
IT Governance
Ryan Shiba- Director of AITC has left for DU
ASU President will be leaving in under 2 years
Construction continues- RH funded as state project
as part of the remodel of our main admin bldg, document mgmt project underway
"Bubble building" should be done soon, awaiting manufacturer's delay on dome
Track recently resurfaced with state money
AIMS Community College
Academic Works
Accommodate
Accuplacer/ACT Automation
Active Data Exchange Calendar
Active Data Exchange Event Registration
Aims Online – Migration to hosted services
Aims Online – Integration to Wimba
Aims Online Upgrade
Aims Online WEBDAV integration
Alertus
Alterus/Rave Integration
Annual Banner upgrade and testing
Annual budget roll
ARC ticketing system
Argos upgrade
AT&T mobile app
Campus Labs Student Learning Assessment
Custom web admissions applications
DegreeWorks reporting
DegreeWorks upgrade
eCivis
Electronic Data Warehouse freezing
Employee Directory improvements
Enterprise Mobility Management
Enterprise test environment
eScrip-Safe to Banner interface
Federal negotiated Fringe Agreement
Federal part time benefits (Affordable Care Act)
Fiscal year and close
FormFusion PDF print
Fort Lupton construction & renovation
Fort Lupton phone system upgrade
General Services renovation
GoPrint Mobile App
Gmail for students
Heartland campus card automation
Heartland Student campus card app
ID system enhancements
Inigral/Uversity Facebook app
Kivuto
Labstats
LiveText
Loveland rewiring
Luminis 5 upgrade
Marketing ticketing system
Mentor student in Mobile App program
Online meeting software
Online travel request
Password complexity
Password re-enable script
PeopleAdmin upgrade
Prognosis
Remote Station software upgrade
Replace online catalog product
Reverse Transfer
SAP improvements
Second Life
Self-Service Finance/Budgeting
Spiceworks
Spiceworks technology inventory
Starfish
TDClient
Transfer articulation software
Tuition guarantee
Virtual Orientation
Voicemail system upgrades & virtualization
Voicemail to email fix
VOIP
Website redesign
Wimba replacement
Windows 8 upgrade
Wireless upgrade in AATC – Windsor
Wiring for new ATC sims in Aviation
Workflow
CCCS
1. Upgrading Banner Student through 8.6 to be completed this October.
2. About to begin user testing on a process to load photo IDs into INB which can be views
in INB and will be used to develop a photo roster.
3. Modified SSB registration to comply with state voter laws. Complete.
4. Working on multiple academic initiatives that will re-create academic standing allowing
us to run standing differently on different populations of students in an effort to reach
out to and retain students while increasing their chances of success.
5. We are beginning to re-implement DegreeWorks so that we can fully utilize the new
functionality available.
6. We are about to begin the implementation of Banner Recruiter, a powerful admissions
CRM application.
7. We are about to begin the implementation of Banner Flexible Registration 8.6 allowing
continuing education students to get admitted, pay, and register all at once without any
staff interaction.
Implementing the dashboard components of BRM for Student Retention Performance
We are retiring our old Legacy warehouse the end of this year – going forward just using
ODS/EDW
Looking at all the implications of Health Care reform and IRS regulations on adjunct work
hours
In preparation for Banner XE - Going to Baseline MEP
Will be implementing CAS & BEIS.
Our main focus these days is getting the Exchange 2010 migration started (hopefully in
early October).
We are also working on upgrading our Certificate Services to Server 2012. This will help
on our security scans.
Also planning the rollout of Server 2012-based domain controllers.
Windows Servers
1. Planning a project to upgrade all SQL databases to the latest version of SQL and
clustering two or more servers for high availability and reliability.
2. Built a virtual lab environment from old server equipment for testing and
configuring projects before they are implemented in the production environment.
(Particular with configuration of VMWare related projects)
3. Perform configuration of disk space on HP EVA SAN (HP EVA SANs are being
replaced with new EMC SAN).
4. Maintain backup of all windows servers with the exception of Domain Controllers
and Exchange/exchange related servers using NetBackup. (Working with new
product called AVAMAR which will be replacing NetBackup as the primary backup
hardware/software)
Network projects
1. Wireless upgrade and installation of Cisco ISE for BYOD
2. Migration of VoIP for college that decided to hold out on original project
3. TelePresence infrastructure replacing Meeting Place
4. Student E-Mail migration – as we speak
Security
- Nessus security scanning – Partnering with CCCS member college staff to remediate
vulnerabilities. -- Started Fall 2012, ongoing..
- Security Awareness – October training campaign for staff & starting monthly e-
mail newsletter. -- Fall 2013
- Cisco ISE – Implementation and deployment of ISE for BYOD & NAC. -- Fall 2013 -
> Spring 2014.
- Standardized Internal SSL CA - Deployment & member college adoption. -- Fall
2013.
Banner Mobile
PPCC went live with Ellucian Go on August 22nd.
- Had one issue but it was a successful go-live.
- PPCC is receiving positive feedback from students.
- So far the mobile app has had 5085 unique visitors and 7145 number of visitors.
- Some of the most used features have been: faculty search, events,
course calendar view and important phone numbers.
Fun Facts
1. Month of August processed 970K telephone calls through telephony system, 48% of
these are inbound calls to colleges. Less than .5% are in-state long distance calls and 1.6%
are out of state long distance.
2. WebEx – currently have 700 users that are scheduling and running meetings
regularly. Month of August had 108K people minutes. So far for September we have 60K
people minutes. We are fully integrated with VoIP and TelePresence environments. Have
one college today that is teaching to K-12 school using TelePresence/WebEx integration.
3. TelePresence – Is growing fast and colleges are ordering new units to replace the old
Polycom systems. We currently run about 35 conferences weekly primarily for distance
education between campuses or to rural K-12 schools.
August, 1.5M student transactions (add/drops) 99,000 highest one day total
1.9M portal visits in August 2013
Refunded $202M through e-refund last year.
49M in tuition dollars collected via our payment gateway last year
Paid 208M in payrolls last year
Deflected 3.2M spam or threat emails in one week
Deliver 369,000 valid emails that same week. Colorado College 1. New CTO : Brian Young, CTO from Creighton University Starts October 1st
2. Virtualized Banner/Oracle database servers
Upgraded banner servers from 2003 to 2008r2
3. Moved all students to Office 365
4. Standing up DR site hosted at University of Wyoming using Vmware Site
Recovery Manager
5. Major upgrades to video surveillance systems 40 cameras to over 250 high
def cams
6. Implemented F5 virtual load balancer/web app firewall
7. Starting PCI compliance activities
8. New fitness center with 25 smart treadmil/elliptical on the network Colorado Mesa University CMU is currently undergoing a comprehensive review for continued accreditation by the HLC. We have
just completed our self-study report, and the site visit is scheduled for Nov. 18-20.
Upgraded our Internet bandwidth from 400 to 600 Mb/s, and we worked with CenturyLink to get fiber
installed to our Forensic Investigation Resource Station approximately 10 miles south of main campus.
Developing a 12-month transition plan to move from Novell to Microsoft Active Directory.
Reviewing Microsoft EES contract for Office 365. We plan to move all students and faculty and most of
staff this Spring
We are moving from Luminis CPIP to CAS Single Sign-On Connectors and are developing the pre-portal
login screen to SSO to applications
CMU installed a pair of FortiGate 800c firewalls this summer. This project also involved re-architecting
the network around a single firewall/router before separating the two into distinct devices. As a result,
we purchased a second NetEqualizer bandwidth shaping appliance.
Completed our SAN upgrade, replacing two HP EVA 4000s with a pair of HP 3PAR StoreServ 7200s. Data
is synchronously replicated between the nodes.
Reconfigured our Cisco wireless deployment. We upgraded firmware on our Cisco wireless controllers
to fix a problem supporting multicast traffic. We repositioned/reoriented 138 APs in four of our older
residence halls.
Purchased SANS Securing the Human (STH) Security Awareness Training Program materials
Replaced the batteries in our data center UPS(s) and completed DR test of our data center
environmental controls.
Upgrading our Banner Oracle Database Production and Test servers to HP rx2800 Itanium servers.
Upgrade to Banner Accounts Receivable 8.4, Finance 8.8, Position Control 8.9, and Payroll 8.9 are
scheduled for Fall Break.
Implementing OrgSync for Student Services
Instituted a policy/methodology for Delayed Financial Aid Disbursement for students who were at risk
for collecting Financial Aid and not actually showing up to class.
Signed an agreement for Adobe Creative Cloud
Upgraded our IBM SPSS Perpetual Licenses to a Term Campus Agreement
Implemented Academic Works for scholarship application and review. This required implementing
Shibboleth identity and authentication providers.
We implemented a dual stack IPv6 configuration so each device currently has both an IPv4 and an IPv6
address. We have configured the firewall rules and started to prepare for IPv6 pilot testing.
Buildings:
Opened a new 209 bed Residence Hall this fall.
New Language, Lit and Mass Communications building to open next fall.
Tomlinson Library renovation is in Design Development stage.
Personnel:
Mike Kansgen, Director of Computing and Network Systems started in May. He is taking lead
on information security initiatives.
Hired a System Administrator position starting October 15. He’s coming from UofWisc.
Madison.
We still have two vacant Banner Programmer positions.
Upcoming Projects:
Support the Registrar’s Office implementation of Degree Works - Spring 2014
Integrate Library fine charges/payments between Banner and Marmot's Millennium using web services
Business Continuity and Risk Assessment Interviews
Penetration Testing and Vulnerability Assessment (3rd Party and Internal)
Mobile Device Management standards
CSU Blackboard Analytics (Learn module) being implemented as a part of a student success and retention
initiative and will also be used by Teaching and Learning unit to improve course design.
Moving away from home-grown Program Review and Assessment software (PRISM) in favor of modules
from Campus Labs.
In addition to data analytics, continue to look into big data issues, how to handle them. New campus
committee on data management .
Implementing PeopleAdmin for hiring, onboarding, position management, performance management.
Implementing Event Management Systems (EMS) from Dean Evans as centralized classroom scheduling
system.
Implementing base functionality of Ellucian Mobile in October 2013, and then continue to roll-out
mobile apps
New cellular partnership with Verizon started in May, to include a stipend option
Continue to struggle with what to do about DAS
About ready to go live with Teamdynamix (project management).
Echo360 deployment expanding as the centrally supported lecture capture solution for the campus.
Implementing Slate this fall for our Admissions office, replacing Recruitment Plus
Continue to engage the cities of Fort Collins and Boulder in Gig.U conversations.
Still very active in the Kuali Foundation
primarily Financial and Research Systems; o Go-live for Coeus, late this fall. o Major upgrade planned for KFS this fall as well
Considering Kuali Human Resources (KPME) for leave reporting , travel management, contracts and grants billing.
Working with CSU-Pueblo on KFS implementation.
NSF Cyber Infrastructure grant - $486K awarded late 2012 to upgrade core data network (hopefully to
100 Gbps), wide area capacity, and to establish a research DMZ in support of big data and the research
community.
Hoping to implement Office365 for faculty-staff email soon; Contract from Internet2 Net+ pending.
Implementing Slate, a cloud-based admissions support package; first stage of implementation going live
in August for Fall 2014 applicants
IAM-related:
Continuing to pursue silver-level assurance for campus; application to be submitted to InCommon this fall
o 15-character password minimum (no complexity) went into effect for campus; email notifications for students start this week. PW expirations moving from 6 months to one year
Using Grouper as a prototype for providing authorization services
Exploring CIFER project as IAM framework
Getting involved early in the social to SAML project, allowing external users to authenticate to campus services using social identities
InCommon certificate program in place; fine tuning the process
Implementing federated identity via Shibboleth for administrative applications, including Kuali systems allowing SSO internally and access from authorized external partners (like CSU-P)
Clustering Shibboleth IDP in a HA environment
Exploring more extensive and formal flipping of classrooms and what technologies may be needed
Pilot, phase 2 of eText content being delivered through Blackboard this fall
Automatically provisioning graduates into Google-hosted alumni domain
VoIP update (3,300 phones deployed, ~ 50% complete)
Expanding the usage of Kaltura (self-hosted) for media streaming
In process of implementing u.Achieve module from CollegeSource to replace current DARS (degree audit
system). Will also implement u.Select module.
Nearing completion of in-house developed online catalog and curriculum application. CSU is also
investigating commercial solutions in this area as a longer-term solution.
CSU-Pueblo Domain name change to CSUPUEBLO Forklift network --Compellent 125 TB SAN x 2 with 100% replication --New Firewall - Sonic Wall --Solidstate back up system --new Dell redundant blade server arrays
AIS - online leave system ESET antivirus Wireless moving to Aruba Migration to Windows 7 Migration to Office 2010 Student email migration to Microsoft Office 365 Fort Lewis College
1. Accreditation 2015
2. College Source - Uachieve Degree Audit
3. Curriculog - Curriculum Management Committee software
4. Education Advisory Board - Student Success Initiative - Student Analytic System
5. MyFiles - web based file transfer
6. Updated our SAN environment HP, continue Virtualization, Veam backups
7. Updated our Internet bandwidth to 600mbs 300/300
8. Consulting engagement for a complete network review and documentation.
9. Pilot program to switch from Moodle to Canvas
10. Positions
1. Promoted Patrick Gaughan to Manager of Technology Support Services
2. Open
1. 2 x Help Desk Technicians
2. 1 Technology Support Specialist
3. Manager of Administrative Information Systems
4. DBA - January 1
5. Banner Programmer Analyst January 1
6. Manager of Networking and Infrastructure - June
11. CATV content transition - DishNetwork to EBH/Direct TV
12. Bradford to PacketFence transition
13. Wireless controller and application transitions
14. Upgraded uPortal to version 4
15. Academic Policy/Term Changes
Metropolitan State University of Denver - Completed an IT strategic plan, including the formation of a new organizational structure and
department of Information Technology Services, which is still in progress, as well as the creation of a
new campus-wide IT Governance structure
- Implementing Ellucian Recruiter, DegreeWorks, and will be engaging in the Action Planning program
with Ellucian
- Continuing migration to Blackboard Learn and elimination of duplicate LMSs, to be completed in
Spring 2014
- Integrating BB mobile with Ellucian Mobile
- Banner XE: Hope to be in production with at least one module by 12/31.
* because of that, reviewing Banner XE SSO with an Ellucian BEIS/CAS workshop
- Java and Groovy Grails classes from Ellucian later in the Fall
* Have limited openings for other schools to participate - see Rick
- Significant upgrades and investments in infrastructure, including new enterprise storage, datacenter
enhancements, replacement/upgrade 20% of campus networking infrastructure, and creation of a
redundant campus network connection
- Planning for a new, consolidated Active Directory Architecture, followed by an identity management
solution, and potential migration to Office365
- Planning for a new Aerospace Engineering Technologies Building
- Completed Phase I of new athletic fields and complex
NCAR
* S-Pol field site networking - staff support for local connectivity (SkyBeam) and a point to point WWAN
link back to UCAR Mesa Lab in Boulder:
-- ~22 mile microwave shot using 4' antennas in 6 GHz licensed band -- http://www.eol.ucar.edu/rsf/spol/spol.html -- as part of FRONT, the Front Range Operational Network Testbed (project working with Colorado State University CSU-CHILL National Radar Facility and the National Science Foundation for the two radar Facilities to more closely align their missions) -- https://ams.confex.com/ams/36Radar/webprogram/Paper228862.html -- http://www.eol.ucar.edu/system/files/files/observing_facility/FRONT/OverviewFRONT.pdf * continued support and slow, incremental growth of Vidyo deployment at UCAR -- http://www.vidyo.com/ * UCAR Information Technology Council strategic plan work organization wide
* 802.11n upgrade completed * converted an upgrade to our trouble ticket system (ExtraView) -- and moved it off Oracle to MySQL * eduroam deployed at UCAR -- very well received in each direction (i.e., visitors to UCAR and our staff on travel to other eduroam enabled institutions); very convenient and lots of good feedback. * couple network engineering staff turnover recently -- one filled internally -- position open for network engineer -- send interested folks my way -- will be posted to https://ucarcareers.silkroad.com/ -- and hopefully hiring soon * new Nagios server hardware to help with increased monitoring load at NWSC -- NETS continues to run our own Nagios instances (which feed alarms up to central NOC Nagios instance) * ICmyNet.Flow for netflow analysis -- http://www.icmynet.com/ -- http://www.icmynet.com/products/icmynet.flow/overview.html -- in place now for UCAR and FRGP -- since we're an early US customer, they've agreed to extend our pricing to other CO EDUs if interest * early phase of migration of rack documentation to OpenDCIM -- http://www.opendcim.org/ * early phase of evaluation of how to use NetDot for various network documentation purposes -- https://osl.uoregon.edu/redmine/projects/netdot * UCAR moving to Google apps for government this year * early testing/use of Everbridge emergency notifcation system (ENS) -- DR/BCP rework for NETS and our lab (CISL) - ongoing work there
* CSM Supercomputer on floor at the UCAR ML -- completed and in use (temp WAN link (GRE tunnel) in place - eventually BRAN and BiSON 10G link here) -- http://minesnewsroom.com/press-releases/mines%E2%80%99-powerful-new-supercomputer-focus-energy-research * IPv6 deployment at UCAR -- just got our own block from ARIN -- will move toward that as opposed to shared Internet2 block we got for FRGP members (been doing v6 at UCAR and FRGP since ~2000 in very limited use) -- deploying Infoblox servers for DDI -- will include NetMRI deployment/use -- http://www.infoblox.com/ * Cellular support by our networking group at UCAR in flux -- we have spoken to AT&T and they will not approve our existing cellular amplification systems per the FCC ruling requirement. -- looking at options - first one is to contact AT&T and Verizon and will see if they will pursue a business case to install and support cellular in all buildings on all campuses - hopefully, agreeing to use some of our imbedded infrastructure - at their cost based on our contracts and commitments. * FRGP/UPoP items -- BiSON fiber ring: McCleod fiber move on Hwy287 between Laramie and Fort Collins to be completed soon -- 10G MOE active at 1200 Larimer (moving to that now; FLC completed today; other moves off our old 1G are scheduled next week; so increased capacity/headroom there) -- NREL - fiber connectivity to ESnet through CSM and BiSON still pending -- Jeffco Schools: discussions about possible UPoP membership also via CSM connection -- NEON connection to UPoP underway -- National Ecological Observatory Network (NEON) -- http://www.neoninc.org/ -- working with NEON and CU to establish a physical fiber connection to interface to the BRAN fiber network. -- recently completed effort to do a rough estimate (high level count) of people using our (FRGP/UPoP and all secondaries) networks (currently estimated to be at about one million) -- PerfSonar maintenance / use continues (good follow up after the workshop we held at NCAR in April) -- http://www.perfsonar.net/
-- FRGP/UPoP Traffic - same overall 2013 traffic mix to date continues along these lines -eg: ~14% commercial ~60% peering ~26% other -- TR/CPS: approaching 140Gig deployed (tomorrow promises to be a high-traffic day because of the release of IOS 7). -- Quilt -- AirWatch ( http://www.air-watch.com ) buying agreement in place -- CIS survey highlights -- ~150Gbps actual inbound bandwidth to tracked program participants -- Cogent, Level3, CenturyLink, Hurricane Electric (top bandwidth) top providers across Quilt membership * Oh, and flood update -- UCAR closed Thu and Fri last week -- minor water damage to many UCAR facilities (roof leaks/damage and minor standing water and wall damage in some locations); all networking gear and related ok. -- Foothills lab campus inaccessible during flooding (Mitchell road flooded) -- Mesa Lab closed yesterday (debris on Table Mesa; plus work on cleanup and gas main problem there) -- most of plant appears ok and intact; one major problem ID'd on Table Mesa Drive -- City, Xcel, and Sturgeon working on a fix to that BRAN fiber today -- right near an Xcel major gas main that serves all of south Boulder - have to get that stabilized first (in process today) -- City urban drainage want to remediate water flow and avoid undercutting in the future -- To date, there has been no fiber signal degradation
UNC
Technology Systems and Services Network Services –
Load Balancer (A10) Call Manager Upgrade Business School Incubator ISP Design and Increase Stanchion Upgrade Complete Campus Fiber Project Complete Campus Televideo (waiting on contract)
TSC/LMS/Classroom – Reviewing BB Mobile
Analog to Digital Conversion Reviewing Streaming Media Proposal Security – Data Security Policy Review (IRB) Reviewing IPS design for future upgrades Physical Security Audit of all IT spaces Enterprise Support Services --
Completed UCS Migration Migration from @live to Office 365 is Complete Evaluating Office 365 for faculty and staff Evaluating online storage solution Implementing a new disk to disk backup appliance (Data Domain 670) Moving from VTL to OST on Data Domain Implementing new Cisco SAN Switches (MDS 9148) Researching Fiber Storage Array Replacement Investigating Virtualization of Banner Production Oracle Server Replacing Symantec Endpoint Protection with Microsoft System Center EndPoint Protection Implemented Sierra in the Library Implementing ILLiad for interlibrary loan Updated to SharePoint 2010 Enterprise Upgraded print servers to Windows Server 2012 defaulted to duplex as sustainability counsel initiative
Desktop Support Team --
WASP Asset Management Solution Upgrading to APP-V 5.0
Institutional Systems Architecture We are upgrading to - Student 8.5.8 HR 8.9 ODS 8.4 Rap 1.3 Completed Database Extension Utilities Installing - Cognos 10.2 Degree Works Investigating - Recruiter On Demand Training from Ellucian
Western State
Redesigning primary public web site, including switching CMS's as well as deploying Sharepoint as an Intranet Expanding our in-house data warehouse for IR and beginning to build data dashboards in Sharepoint Switched internet connection to MOE, already gone from 200 to 300MB. Upgraded ARUBA controller Redeploying wireless network with N ap's at a much higher density
Added Visitor wireless access with self-registration
Migrating to AD 2012 native domain, 75% done
Upgrading windows servers to 2012 as appropriate
Replaced end of life EMC SAN with Nimble SAN
Preparing to roll out Ellucian Mobile
Deploying a CMS for our Education Department (TK20) Commissioning a new Field House opening early spring, with most equipment on the internet Usual Banner upgrades, also Degreeworks
Investigating Office 365
Investigating SIP trunking for phone service
In the middle of a Presidential search with interim President and interim Provot