RES 11-49 - Laserfiche WebLink

Home Browse Search

SWIFT Contract #30251 The departmental network is TCP/IP based. As the default profile of the firewall is to deny all incoming and outgoing traffic, DPS divisions and/or their vendors must provide all source and destination addresses, port numbers, and protocols required for network communications. In addition, they must provide a written business need for the network communications. Applications and/or Applicatiozl Servers DPS divisions and/or their vendors will need to discuss with the departmental Security Manager as to the appropriate placement of applications and application servers. Data Privacy Since some departmental data is classified as "Not Public'' data, this t}~pe of data must be protected during transport across public networks and possibly in storage. The department has implemented Virtual Private Network (VPN) technology to aid in the transport of private data. Contact the departmental Security Manager for discussions on the use of this technology. Vendor Remote Access Remote vendor access for technical support will occur when there is a valid business need, through a secured and monitored VPN. If persistent access is required, the VPN will use two- • factor authentication. If one time access is required, VPN access may be granted using a strong password. This remote VPN access shall be limited by the firewall and/or VPN server to the specific protocols, ports, and servers needed. Vendor staff may be required to undergo a background criminal history check in accordance with DPS Policy #5100 Information Resources Security and Acceptable Use. (THE REMAINING PORTION OF THIS PAGE WAS INTENTIONALLY LEFT BLANK) • Joint Powers Agreement (Rev. 08/10)