ITS Infrastructure-Networking and Information Assurance (IA) experts apply a multi-layered approach to maximize the network security. The Network Security service includes policies and practices followed in order to monitor and prevent unauthorized access or misuse of computer networks and network-accessible resources.
Impact
The primary objective of Network Security is to prevent the following:
- Unauthorized access to the network
- Disruption or degradation of performance, or any other interference with normal functioning of the network
- Use of the network in violation of Responsible Use of Information Resources (SPG 601.07)
Scope
Network Security encompasses the Core Network and the border network which together connect all of the Ann Arbor network providers to the Internet and to each other in order to deliver speed, reliability, capacity, and bandwidth for both the daily traffic at the university and the more complex needs of the entire Ann Arbor campus and Michigan Medicine.
The ITS-Network Security Operations (NSO) team provides security-related services for the UM community to deliver consistent, high-quality network connectivity on the Ann Arbor campus. This includes both wired and wireless network connections so that faculty, staff, students, patients, and guests can effectively engage in teaching, learning, research, and the administrative services of the university.
Network Security Solutions
Network security currently include the following solutions:
- Firewalls
Network security filters that monitor the network traffic and establish a barrier between the network and incoming traffic. Firewalls, including next generation firewalls, distributed firewalls, data center firewalls, and custom unit firewalls, protect regulated data and specific unit resources from any potential virus spread or unwanted network intrusions. - Network Border Infrastructure System
A system that identifies threats, compares threats, performs traffic inspection, performs log recording, and automatically implements filters to protect the entire university. The system is used for network security threat detection and mitigation. - WiFi Standards & Security
ITS provides an Encrypted WiFi network, for use when working on campus, and the U-M Virtual Private Network (VPN), for use when working off campus, to help faculty, staff, and students meet the obligations of and comply with the university policies. MWireless and eduroam both provide strong encryption when using WiFi on campus. The U-M Virtual Private Network (VPN) creates a secure, encrypted connection between your device and the U-M network while also enabling access to university resources from untrusted networks. -
Administrative Controls
Administrative controls implement University policies, procedures, standards, and practices to ensure the protection of networked University assets.