Differences

This shows you the differences between two versions of the page.

--- security:addhealth [2026/07/08 22:44] – [Firewall Restrictions: Allowed Network Access] jnilsson
+++ security:addhealth [2026/07/08 22:45] (current) – jnilsson
@@ Line 48: / Line 48: @@
   * Maintaining administrative records such as access changes and system changes.
   * Supporting UCI and UNC incident response activities.
+===== Onboarding procedure =====
+When a new user is confirmed and approved by the PI:
+  - Notify System administrators, who will create the user account
+  - Authentication can be configured for new user accounts one of two ways:
+    - Provide an [[:howto:sshkey|SSH key]] to [[socit@uci.edu]]
+    - Schedule an on-boarding meeting (virtual or in-person) during which a password and MFA token will be configured.
+  - Accounts will be set to expire after 1 year. Annual confirmation of current active users is required to re-enable accounts.
 ===== UCI Add Health server details =====
@@ Line 62: / Line 71: @@
 Firewall restrictions in place on the server only allow connections from these subnets:
 ^ Subnet name ^ CIDR ^
-|  Campus Network 128.195 | 128.195.0.0/16 |
+| Campus Network 128.195 | 128.195.0.0/16 |
-|  Campus Network 128.200 | 128.200.0.0/16 |
+| Campus Network 128.200 | 128.200.0.0/16 |
-|  VPN | 172.23.0.0/20 |
+| VPN | 172.23.0.0/20 |
-===== Onboarding procedure =====
-When a new user is confirmed and approved by the PI:
-  - Notify System administrators, who will create the user account
-  - Authentication can be configured for new user accounts one of two ways:
-    - Provide an [[:howto:sshkey|SSH key]] to [[socit@uci.edu]]
-    - Schedule an on-boarding meeting (virtual or in-person) during which a password and MFA token will be configured.
-  - Accounts will be set to expire after 1 year. Annual confirmation of current active users is required to re-enable accounts.