Critical Host Critical Host DatabaseDatabase

OverviewOverview

Critical Host DefinitionCritical Host Definition

The current policy (which is being updated as The current policy (which is being updated as we speak) defines a Critical Host as:we speak) defines a Critical Host as:

Contain sensitive or confidential data Contain sensitive or confidential data including, but not limited to, personally including, but not limited to, personally identifiable medical records, payroll identifiable medical records, payroll information, student grades and transcripts, information, student grades and transcripts, or social security numbers, or or social security numbers, or

Are used in planning, managing, or operating Are used in planning, managing, or operating major academic, research, or administrative major academic, research, or administrative functions of the University. functions of the University.

You should also include all mission critical You should also include all mission critical devices that could affect your school or devices that could affect your school or center’s ability to conduct businesscenter’s ability to conduct business

Obtaining an accountObtaining an account

You must be listed as host contact in the You must be listed as host contact in the assignments database for the host you assignments database for the host you need to manageneed to manage

Your IT Director or equivalent must send Your IT Director or equivalent must send an email to an email to security@isc.upenn.edusecurity@isc.upenn.edu giving giving you authorization and include your email you authorization and include your email address, pennkey, first and last nameaddress, pennkey, first and last name

Once the account is created you will Once the account is created you will receive an email confirmation. At this receive an email confirmation. At this point you can begin to use the application.point you can begin to use the application.

Critical Host Critical Host ApplicationApplication The application uses the FAST database The application uses the FAST database

infrastructure and queries the assignments infrastructure and queries the assignments database for authorization (ie, host contact), IP database for authorization (ie, host contact), IP Address and contact informationAddress and contact information

Making a change in assignments will affect the Making a change in assignments will affect the data in critical host application but the data in critical host application but the application does not make changes to the application does not make changes to the assignments database. So, if you delete a assignments database. So, if you delete a record in assignments the critical host record in assignments the critical host database will not be able to retrieve the data. database will not be able to retrieve the data. Deleting or modifying a record in the crit host Deleting or modifying a record in the crit host app will not affect the data in the assignments app will not affect the data in the assignments database.database.

Using the applicationUsing the application

Log in with your pennkey and Log in with your pennkey and password (link provided later)password (link provided later)

You will then have two main You will then have two main functions for managing your functions for managing your hosts. Finding records or Creating hosts. Finding records or Creating records.records.

Screen CaptureScreen Capture

Register a hostRegister a host

Register a hostRegister a host

If the record If the record already exists or already exists or the assignments the assignments information is information is missing you will missing you will get an error.get an error.

Now click the Now click the “Select” button“Select” button

Register a hostRegister a host

FindingFinding

Searching for Searching for UPENN.EDU would UPENN.EDU would give all hosts for the give all hosts for the entire campus. entire campus. However your However your authorization will authorization will only allow your own only allow your own domain such asdomain such as SECURITY.ISC.UPENN.EDSECURITY.ISC.UPENN.EDUU

Finding resultsFinding results

All for nowAll for now

Visit our security website and follow the Visit our security website and follow the

Critical Hosts linkCritical Hosts link http://www.upenn.edu/computing/secuhttp://www.upenn.edu/computing/security/rity/

Or go directly to the application from Or go directly to the application from https://medley.isc-seo.upenn.edu/criticalHosts/jsp/fast.https://medley.isc-seo.upenn.edu/criticalHosts/jsp/fast.dodo

If any of you have questions please send to If any of you have questions please send to LTR@ISC.UPENN.EDULTR@ISC.UPENN.EDU