RES 11-49 - Laserfiche WebLink

Home Browse Search

SWIFT Contract #30251 EXHIBIT A Department of Public Safety's Security Architecture • Minnesota Department of Public Safety divisions and their vendors should be aware of the department's security architecture when designing and/or implementing applications or installing network devices on departmental resources. Web Based Applications and/or Servers Web Based Applications should be based upon Microsoft Internet Information Server unless there is compelling business needs to use some other Web Server environment. Web Servers will be installed on a separate and isolated Ethernet network segment behind a departmental firewall. Web Servers must not host Applications. Applications must reside on a separate Application Server on a separate and isolated Ethernet network segment behind a departmental firewall. The departmental network is TCP/IP based. As the default profile of the firewall is to deny all incoming and outgoing traffic, DPS divisions and/or their vendors must provide all source and destination addresses, port numbers, and protocols required for network communications. In addition, they must provide a written business need for the network communications. Database Applications and/or Servers • Database Applications should be based upon Microsoft SQL Server unless there are business needs to use some other Database Server environment. Database Servers will be installed on a separate and isolated Ethernet network segment behind a departmental firewall. The departmental network is TCP/IP based. As the default profile of the firewall is to deny all incoming and outgoing traffic, DPS divisions and/or their vendors must provide all source and destination addresses, port numbers, and protocols required for network communications. In addition, they must provide a written business need for the network communications. Email Based Applications and/or Servers DPS divisions and/or their vendors are encouraged to use the department's email system where appropriate. Email Based Applications should be based upon Microsoft Exchange Server unless there is compelling business needs to use some other Web Server environment. Email Servers will be installed on a separate and isolated Ethernet network segment behind a departmental firewall. Joint Powers Agreement (Rev. 08/10)