IT Briefing March 21, 2013North Decatur Building4th Floor Auditorium

21-Mar-13

IT Briefing Agenda

• Office 365 Project Update• Major Incidents Update• Virtualization Update• IT Security Update

• Jay Flanagan• Missie Martin• Steve Siegelman• Derek Spransy / Robert Vineyard

2

21-Mar-13

Office 365 Project UpdateFaculty, Staff, EHC

Jay FlanaganManager, UTS Messaging, Infrastructure

3

21-Mar-13

4

21-Mar-13

DocumentationBusiness

Case

Project Charter

Project Plan / Tasks

OLAsCommunication

Training

Project Scope

5

21-Mar-13

In Process

• Overall Office 365 Project

Unified Messaging

6

21-Mar-13

Exchange Online

7

21-Mar-13

Exchange Archiving

8

21-Mar-13

In Process

ExchangeUnified

Messaging

9

21-Mar-13

Lync Online

10

21-Mar-13

Associated KB Articles

Lync

KB02558

KB02556

KB02464

KB02471

KB02210

KB02467

KB02473

KB02472

KB02468

KB02208

KB02207

KB02206

KB02470

KB02465

KB02209

KB02469

KB01875

KB01874

KB01876

KB02126

11

21-Mar-13

Web Apps / Sharepoint / Skydrive Pro

SkyDrive Pro

12

21-Mar-13

In Process

• Communication Plan

13

21-Mar-13

Office 365Outlook

OWAPDA’s

14

21-Mar-13

Questions?

15

21-Mar-13

16

21-Mar-13

Major Incidents Update(P1 – Critical)

Missie MartinIT Service Manager, ITSMO, Integration

17

21-Mar-13

P1-Critical Incidents

• INC01787180 (3/11) – ColdFusion– Server went down and had to be restarted– Downtime of 10 minutes– Upcoming changes to migrate to new CF9 configuration

• CHG115262 (4/2)• CHG115263 (4/4)

• INC01787696 (3/11) – Network– Power outage affected locations all along Clifton Road– Downtime of 1 hour 40 minutes

• INC01779087 (2/22) – OIT Shopping Cart & Billing Portal– oitbilling.emory.edu was unavailable– Server reboot resolved a connectivity issue– Downtime of 43 minutes

18

21-Mar-13

Major Incidents Update

?Questions

19

21-Mar-13

Virtualization Update

Steve SiegelmanManager, Systems Engineering, Infrastructure

20

21-Mar-13

21

21-Mar-13

Support

Consolidated Switches

Centralized Management

Better Integration with Datacenter Switching22

21-Mar-13

23

21-Mar-13

24

21-Mar-13

10 HP Blades

8 Cisco Blades 500+ VMs

No Downtime

!!

NDB Consolidated Cluster Hardware Refresh

25

21-Mar-13

Next Steps

NDB VMWare 5.1 Upgrade

WS VMWare 5.1 Upgrade

WS HW Refresh

26

21-Mar-13

Misc…

SAN Storage Option on Shopping Cart

Future: Cookie Cutter VM Configration

Future: Enterprise Backup & DR Capabilities

27

21-Mar-13

28

21-Mar-13

Virtualization Update

?Questions

29

21-Mar-13

IT Security Update

Derek SpransySr Information Security Specialist, Information Security

Robert VineyardInformation Security Specialist, Information Security

30

21-Mar-13

Security Awareness

March:• Storing data in the cloud

31

21-Mar-13

SQL Injection in the News

• February 2013: 2GB worth of customer records leaked from American Express

• November 2012: 150,000 passwords stolen from Adobe

• September 2012: 3.6 million Social Security Numbers and 387,000 Credit Cards stolen from the South Carolina Department of Revenue

• July 2012: 453,000 Yahoo accounts compromised

• June 2012: 6.5 million LinkedIn passwords stolen

32

21-Mar-13

How do we stop it?

• OIT Information Security is currently developing new technology and education

Preview of coming attractions:• Web Vulnerability Scanner (HP WebInspect)• Web App Firewall (Imperva SecureSphere)• Developer Training on Defensive Programming

33

21-Mar-13

What’s a WAF?

• Web Application Firewall (Imperva SecureSphere)

• Network security device installed at the Load Balancers to protect Emory’s web sites

• Blocks thousands of known attack signatures• Virtual Patching of vulnerabilities found by a

scanner• Automatically “learns” how a site normally

operates to address unknown vulnerabilities• Requires in-depth knowledge of your application• Not perfect and may block legitimate traffic

34

21-Mar-13

IT Security Update

?Questions

35

21-Mar-13

Thank you for coming!

36