[All_jlau] Network Status 7/7 ~4pm

[Roy Whitney]

*Cyber Event Discussion: CEBAF Center Auditorium, 12:00 noon, Friday, 
7/8; seating as available.*

*By 5:00 today, Thursday, 7/7: Save your work and log off; leave you 
computer powered up. *

All Staff and Users,

For the cyber event we are working through, following is status 
information, changes and updates for this afternoon , 7/7 ~4:00 pm:

    * IT Division Staff are rebuilding the Windows Domain and
      compromised servers.
          o The new Windows domain will be re-architected with
            additional security enhancements.
          o All new servers are being rebuilt using the latest versions
            of operating systems.
          o Desktop administration privileges will be removed for all users.
    * A new network architecture is also being implemented
          o Key aspects will be deployed immediately with other changes
            being deployed during the 6 month down.
          o The Accelerator, Experimental Halls  and FEL will be more
            isolated from the rest of the site and from each other.
          o Two-Factor authentication gateways will be deployed between
            these networks and the rest of the Laboratory.
          o Web and Email access will be via Terminal Servers or Central
            Linux systems.
    * After the cut-over to the new Windows domain, we will move forward
      bringing additional elements back on line.
          o Identify, rebuild compromised desktops and user systems
          o Restore Internet connectivity.
          o Bring offsite web servers back online.
          o Bring remote access (ssh) back online after compromised
            systems have been identified and contained, and passwords
            have been changed.
    * Changes impacting staff and Users
          o Staff and Users will be required to change their passwords.
            Instructions will be provided.
          o Internet access from onsite will be made available via
            central Terminal Servers (Windows) and Linux systems.
    * Questions?
          o There will be an informal presentation on the cyber attack
            at 12pm (noon) on Friday in the auditorium, which will
            include time for a question and answer session. Remember any
            questions from the media are to be referred to Public Affairs.

Additional information:

    * Currently available services and connectivity will remain as they
      are until 5:00 pm today, Thursday, 7/7.
          o Shortly after 5:00 pm Thursday, 7/7, Windows central
            services will be offline briefly.
          o IMPORTANT: save all work prior to 5:00 pm.
          o Windows users: log off but keep your systems booted up and
            connected to the network for the evening.
    * Smartcard users: either come to the helpdesk anytime after 7:15 am
      Friday, 7/8 or come to the VARC lobby any time after 7:15 am 7/8.
    * All users: anticipate needing to reboot the morning of Friday, 7/8
      and changing passwords.

    * Web applications such as Insight, reqs, staff search, etc. are
      expected to be up mid day, Friday 7/8.
    * Web application such as DocuShare for off-site available files,
      publications, LQCD, etc. will then be brought back up.

Additional information will be made available as updates occur using to 
the following link (on site only):

http://www.jlab.org/status/

Contact the helpdesk for any issues: helpdesk at jlab.org 
<mailto:helpdesk at jlab.org>, 7155

Roy Whitney
Chief Information Officer
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://mailman.jlab.org/pipermail/all_jlau/attachments/20110707/e031f915/attachment.html