ITS networking and Information Assurance (IA) experts apply a multi-layered approach to network security.
Network Security includes policies and practices followed in order to prevent and monitor unauthorized access or misuse of computer network and network-accessible resources. The primary objective of Network Security is to prevent the following:
- Unauthorized access to our network
- Disruption or degradation of performance, or any other interference with normal functioning of the network
- Use of network in violation of Responsible Use of Information Resources (SPG 601.07)
Our Network Security includes our Core Network, which, together with the border network, connects all of the Ann Arbor network providers together in order to deliver speed, reliability, capacity, and bandwidth for both the daily traffic at the university and the more complex needs of the entire Ann Arbor campus and Michigan Medicine.
UMNet Network Security Operations provides consistent, high quality network connectivity on the Ann Arbor campus with both wired and wireless network connections so that faculty, staff, students, patients, and guests can effectively engage in teaching, learning, research, and the administration of the university.
Elements of network security currently include the following four solutions:
- Network Border Infrastructure System
Network Border Infrastructure System protects the entire University of Michigan by identifying threats, comparing threats, performing traffic inspection, log recording and being fully programmable. The system is used for network security threat detection and mitigation.
- Intrusion Prevention System (IPS)
The Network IPS sits at the border between university networks and the internet, protecting networks from malicious traffic coming from outside the university.
Virtual, data center, and custom unit firewalls protect regulated data and specific unit resources in the data centers and other campus locations.
- Custom Unit Firewalls
Some units choose to manage their own firewalls, which are then administered by unit IT professionals.
U-M wireless is also protected and provides encryption. See WiFi Standards & Security for more information.
The U-M Virtual Private Network (VPN) creates a secure, encrypted connection between your device and the U-M network while also enabling access to university resources from untrusted networks.