1 NETWORK PLANNING TASK FORCE FY’07 “ Setting the Rates” 11/20/06.

1

NETWORK PLANNING TASK FORCE FY’07

“Setting the Rates”

11/20/06

2

Meeting Schedule – FY ‘07

■ Meetings 1:30-3:00pm, 3401 Walnut Street■ Fall Meetings

■ Intake and Current Status Review – August 21■ Agenda Setting & Focus Group Planning – September 18■ Focus Group – October 04■ Security Strategy Discussions – October 16 ■ Focus Group – October 17■ Network Strategy Discussions – October 30 ■ Strategy Discussions – November 6 ■ Final Meeting-Prioritization /Rate Setting – November 20 ■ Focus Group Feedback – December 4

3

Agenda

■ FY ’07 strategic topics summary■ Central authorization system ■ Financial summary

■ Network financial health■ Setting the CSF Rate■ Other proposed rates

■ Status of New Funding Model

4

FY ’07 Strategic Topics

■ Building uplinks: gigabit and redundant links■ Network access control

■ Scan and Block■ PennNet Gateway (802.1X)

■ Campus-wide wireless■ VoIP■ In building cellular coverage■ Security initiatives■ Central authorization system

5

Backbone Infrastructure

6

Building Uplinks: Gigabit and Redundant Links■ Goal

■ 2 gig links per building/subnet

■ Status■ 18 gig only■ 6 gig/100Mbps■ 17 dual gig

■ We have a long way to go in reaching this goal.■ The lion’s share of the CSF funding is going to

support this effort.

7

Security Initiatives

FY07 FY08 FY09 Beyond■Create documentation for recommended security configurations for most common devices■Evaluate 3rd party mobile data security tools and services.■Develop a secure remote access strategy.■Develop a strategy for protecting mobile devices, poss. to include key recovery

■Pilot a central file service (e.g. WebDav). ■Pilot mobile data security tools as appropriate■Design and implement secure remote access pilot.■Develop decentralized IDS strategy.

■In policy, require encryption of confidential data.■Roll out WebDav, secure remote access, mobile security tools as approp.■Design and pilot decentralized IDS.

■In policy, forbid confidential data on portable devices without a waiver.■Universal access control: authentication, scan and block■Perimeter firewall

8

Central Authorization System

Proposal for NPTF funding

November 2006

9

Central AuthZ System

■ Build a central authorization system that could be utilized by applications across the University

■ Utilize Penn Community data and school/center created lists to facilitate authorization decisions

■ Allow Schools and Centers to build and reuse authorization information across applications

■ Provide sophisticated group management capabilities, such as subgroups and composite groups, to support access management needs.

10

Central AuthZ System: Benefits■ Facilitate consistent application of University business rules

■ Managed through a common UI and standard API ■ Streamline maintenance of authorization data

■ Bring scattered redundant groups together for re-use■ Allow useful actions on these groups -- group math, group

nesting, exclusion criteria■ Leverage Penn Community data for accurate, up to date

authorization decisions■ Can leverage existing attribute information

■ Support the creation of new groups■ By schools, departments, and individuals!■ Distributed/delegated model of control

11

Central AuthZ System: Use Cases

Use Case Existing Means Central AuthZ

Employee Termination

Can't just remove from authentication system because the person may still need access to benefits and there may be payroll obligations.

Spend hours tracking down and removing access to applications and systems on an individual basis

Remove the person or blacklist them in the central authorization system for services no longer used.

New BA is Hired

May take up to two weeks for the person to be completely set up to use all the appropriate applications A BA can be set up in a few simple steps.

Faculty in SOMWho are a Principle InvestigatorBut not in genetics

Cumbersome to develop a means to compile and maintain a list from disparate sources

Use of the group and exclusion features of the central Authorization system allow this to be easily done and maintenance is automated.

12

Central AuthZ System: Current Implementation Base■ More than 80 institutions are currently evaluating or implementing

central authorization technology.■ Partial listing of where systems are in production or nearing a

production cutover.■ Stanford■ Brown■ Cornell University■ Duke University■ National Cancer Institute (caBIG - Cancer BioInformatics Grid) ■ South China University of Technology■ University of Bristol■ University of Chicago■ University of Kansas■ University of Southern California■ University of Wisconsin

13

Central AuthZ System: Costs

■ ISC would fund initial development and deployment (~$150,000)

■ Proposal for $110,000 annual ongoing funding from NPTF (1 FTE + HW & facilities)■ Estimated at $.18/IP address/month

14

Central AuthZ Systems

■ Clarify concerns and discuss issues

15

FY ’07 – ’12 Network Financial Health

DIRECT CHARGES FY'07 Budget FY'08 Budget FY'09 Budget FY'10 Budget FY'11 Budget FY'12 Budget TELECOMMUNICATIONS 9,260,000$ 9,090,000$ 8,810,000$ 8,500,000$ 8,250,000$ 8,100,000$ CENTRAL SERVICE FEES 6,180,000$ 6,550,000$ 6,890,000$ 7,210,000$ 7,550,000$ 7,910,000$ NETWORK INSTALLATIONS/PROJECTS 1,500,000$ 1,500,000$ 1,500,000$ 1,500,000$ 1,500,000$ 1,500,000$ WALLPLATE CONNECTIONS 2,820,000$ 2,950,000$ 3,100,000$ 3,220,000$ 3,340,000$ 3,460,000$ EMAIL, WEB HOSTING, VIDEO 840,000$ 890,000$ 940,000$ 960,000$ 960,000$ 990,000$ MAGPI SERVICES 1,720,000$ 1,920,000$ 2,120,000$ 2,320,000$ 2,420,000$ 2,520,000$ WIRELESS 355,000$ 355,000$ 355,000$ 355,000$ 355,000$ 355,000$ OTHER (SLAs) 390,000$ 390,000$ 390,000$ 390,000$ 390,000$ 390,000$ SUBTOTAL DIRECT CHARGES 23,065,000$ 23,645,000$ 24,105,000$ 24,455,000$ 24,765,000$ 25,225,000$

GENERAL FEE - PVN 613,000$ 626,000$ 638,000$ 651,000$ 664,000$ 677,000$

TOTAL INCOME 23,678,000$ 24,271,000$ 24,743,000$ 25,106,000$ 25,429,000$ 25,902,000$ TOTAL EXPENSE 23,728,000$ 24,521,000$ 24,443,000$ 25,806,000$ 25,629,000$ 25,202,000$

Cumulative (Surplus) / Deficit 50,000$ 300,000$ -$ 700,000$ 1,000,000$ 300,000$

16

FY ’08 Revenue Sources

2%

12%

10%

24%3%

8%

6%

4%

20%

8%3%

TELECOM LINES

VOICEMAIL

VOICE ALLOCATION

LONG DISTANCE CALLING

TELECOM INSTALLATIONS

CENTRAL SERVICE FEES

NETWORK INSTALLATIONS

WALLPLATE CONNECTIONS

EMAIL, WEB HOSTING, VIDEO

MAGPI SERVICES

OTHER

17

Penn iPhone – Projected Costs

Assumptions1. Meridian Business Set one-time cost of $368 is depreciated over a 60-month period for this comparison2. 30% allocation is included3. Waived until end of FY ’084. All pilot rates end on June 30, 2007.5. Price reduction in FY ’08 and beyond possible as cross subsidy for network is reduced.6. Cross-subsidy should be eliminated by FY ’10 or sooner if possible.

Traditional Phone VOIP Pilot FY '07 VOIP FY '08 VOIPCentrex line/VOIP line $15.60/month (2) $15.60/month $17.60/monthMBS Set (1) w/maintenance $10.03/month (2) Free for 6 months $8.00/monthVoicemail $9.75/month (2) Free for 6 months $9.75/month (2) _______________

subtotal/user $35.38/month $15.60/month $35.35/month $32/month

Usage - Local ($0.06/call) $3.00 $3.00 $3.00 $1.50Usage - Long Distance ($.10/min) $3.00 $3.00 $3.00 $1.50

TOTAL $41.38/month $21.60/month (4) $41.35/month $35/month

Conversions N/A $80 waived (3) $80 waived (3) $80 waived (3)

18

FY ’07 Current Central Service Fee RateFY'07 CSF BUNDLE OF SERVICES Computer H/S, OS ISC Staff Total

Main, Licenses

CAMPUS BACKBONE & FIBER/CABLE MANAGEMENT 1,054,500$ 779,886$ 1,834,386$ INTERNET/ BAND. MANG./ /NET SECURITY 807,000$ 321,496$ 1,128,496$ INTERNET2 242,000$ 121,448$ 363,448$ NOC/NETWORK MANAGEMENT/EXT HOURS 164,000$ 317,458$ 481,458$ WWW 119,000$ 177,463$ 296,463$ INFRA SOFT SVS/AUTHEN/AUTH 131,000$ 627,599$ 758,599$ NETNEWS 13,500$ 18,303$ 31,803$ MAIL RELAY, LISTSERV, DIRECTORY (NISC) 59,500$ 212,556$ 272,056$ CENTRALIZED WIRELESS AUTH -$ 165,240$ 165,240$ PENN COMMUNITY BASELINE -$ 51,500$ 51,500$ TSS WIRELESS SUPPORT -$ 20,000$ 20,000$ SECURITY TOOLS, EDUCATION & RESPONSE -$ 98,200$ 98,200$ PENN COMMUNITY ADDITIONAL SUPPORT -$ 50,000$ 50,000$ PENN COMMUNITY "ALWAYS AVAILABLE" 20,000$ 10,000$ 30,000$ VULNERABILTY SCANNING (2x yr.) 25,000$ 25,000$ PENNKEY SCHOOL SUPPORT -$ 56,000$ 56,000$ TOTAL 2,610,500$ 3,052,149$ 5,662,649$ FY'07 PROJECTED AVG IP ADDRESSES 42,700 FY'07 RATE 11.05$ PROJECTED 100MBPS BANDWITH SURCHARGE FUNDING 96,000$ FY'07 FINAL RATE 10.86$

19

FY ’08 Projected Central Service Fee Rate

FY'08 PROJECTED Computer H/S, OS ISC Staff TotalCSF BUNDLE OF SERVICES Main, Licenses

CAMPUS BACKBONE & FIBER/CABLE MANAGEMENT 1,837,000$ 1,166,305$ 3,003,305$ INTERNET/ BAND. MANG./ /NET SECURITY 794,375$ 341,890$ 1,136,265$ INTERNET2 202,480$ 194,714$ 397,194$ NOC/NETWORK MANAGEMENT/EXT HOURS 121,107$ 389,250$ 510,357$ WWW 123,644$ 171,356$ 295,000$ INFRA SOFT SVS/AUTHEN/AUTH 153,816$ 669,657$ 823,473$ NETNEWS 13,500$ 18,303$ 31,803$ MAIL RELAY, LISTSERV, DIRECTORY (NISC) 69,984$ 93,781$ 163,765$ CENTRALIZED WIRELESS AUTH 50,000$ 100,000$ 150,000$ CONSULTING TO SCHOOLS/CENTERS 173,437$ 173,437$ PENN COMMUNITY BASELINE 51,500$ 51,500$ TSS WIRELESS SUPPORT 20,000$ 20,000$ SECURITY TOOLS, EDUCATION & RESPONSE 98,200$ 98,200$ PENN COMMUNITY ADDITIONAL SUPPORT 50,000$ 50,000$ PENN COMMUNITY "ALWAYS AVAILABLE" 20,000$ 10,000$ 30,000$ VULNERABILTY SCANNING (2x yr.) 25,000$ 25,000$ PENNKEY SCHOOL SUPPORT 56,000$ 56,000$ AUTHORIZATION NEW IN FY'08 110,000$ 110,000$ TOTAL 3,385,906$ 3,739,393$ 7,125,299$ FY'08 PROJECTED AVG IP ADDRESSES 49,811 FY'08 RATE BEFORE BANDWIDTH SURCHARGE $11.92PROJECTED BANDWITH SURCHARGE 72,000$ FY'08 DRAFT RATE $11.80Telecommunication Subsidy (PHASED OUT BY FY'10) 500,000$ Revised Draft Rate FY'08 $10.96

20

FY’08 Proposed RatesSERVICE

FY' 07 RATES FY'08 PROPOSED RATE COMMENTS(Monthly) (Monthly)

NETWORKCentral service fee 10.86$ 10.96$ 0.9% increase

10baseT port charge 6.03$ 6.03$

100baseT 8.03$ 7.03$ Rate reductions starting 1/1/07

1000baseT 100.00$ 30.00$ May not be immediately avilable in all buildings. Infrastructure builds could delay implementation several months.

WIRELESSWireless Access Point Support 27.00$ 27.00$ PHONESExisting services (lines, set, usage, long distance)

Same as FY'06 No rate increases.

Phone (VoIP) See page 17. See page 17.

VIDEOPenn Video Network 14.00$ 14.50$ 3.4% increase for non-residential

customers. Vendor costs for programming went up 8%.

Video Production, Conferencing, Streaming

Some rates increased 10% No rate increases. Optional service. Rates stil well below external market.

21

New Funding Model

■ Current Status

22

Next Steps

NPTF makes rate recommendations. Rate recommendations presented to Provost

and EVP. Final FY ’08 rates established. Rates sent to ABA in late December. Rates published in Almanac on December

20th.