Differences

This shows you the differences between two versions of the page.

--- security:addhealth [2026/07/08 20:20] – jnilsson
+++ security:addhealth [2026/07/08 22:45] (current) – jnilsson
@@ Line 48: / Line 48: @@
   * Maintaining administrative records such as access changes and system changes.
   * Supporting UCI and UNC incident response activities.
-===== UCI Add Health server details =====
-^ Hostname | addhealth.socsci.uci.edu |
-^ IP address | 128.195.247.155 |
-^ Access Protocols | [[https://wiki.socsci.uci.edu/helpdesk/doku.php?id=howto:linux_basics#ssh|SSH]] |
-^ Session timeout | 30 minutes |
 ===== Onboarding procedure =====
@@ Line 61: / Line 54: @@
   - Notify System administrators, who will create the user account
   - Authentication can be configured for new user accounts one of two ways:
-    - Provide an [[:howto:sshkey|SSH key]] to socit@uci.edu
+    - Provide an [[:howto:sshkey|SSH key]] to [[socit@uci.edu]]
     - Schedule an on-boarding meeting (virtual or in-person) during which a password and MFA token will be configured.
   - Accounts will be set to expire after 1 year. Annual confirmation of current active users is required to re-enable accounts.
+===== UCI Add Health server details =====
+^ Hostname | addhealth.socsci.uci.edu |
+^ IP address | 128.195.247.155 |
+^ Access Protocols | [[:howto:linux_basics#ssh|SSH]] |
+^ Session timeout | 30 minutes |
+==== Firewall Restrictions: Allowed Network Access ====
+Only connections from on-campus or from the [[https://www.oit.uci.edu/services/security/vpn/|Cisco AnyConnect VPN]] will be allowed to connect to the server. If you are off-campus or on a UCI-WiFi network, you must first connect to the VPN before attempting to connect to the Add Health server.
+Firewall restrictions in place on the server only allow connections from these subnets:
+^ Subnet name ^ CIDR ^
+| Campus Network 128.195 | 128.195.0.0/16 |
+| Campus Network 128.200 | 128.200.0.0/16 |
+| VPN | 172.23.0.0/20 |
 ===== Maintenance and Backup Schedule =====
-^ Maintenance/Security updates | Monthly, on the 1st Monday |
+^ Maintenance/Security updates | Monthly, on the 1st Monday, 9am-11am |
 ^ Full System Backup | Weekly on Sunday |
 ^ Differential file-level backup | Nightly |