{"id":140544,"date":"2022-05-31T11:44:41","date_gmt":"2022-05-31T15:44:41","guid":{"rendered":"https:\/\/www.bu.edu\/tech\/?page_id=140544"},"modified":"2022-08-25T18:25:03","modified_gmt":"2022-08-25T22:25:03","slug":"data-center-firewall-upgrade-network-refresh","status":"publish","type":"page","link":"https:\/\/www.bu.edu\/tech\/services\/infrastructure\/data-center\/crc-data-center\/data-center-firewall-upgrade-network-refresh\/","title":{"rendered":"Data Center Firewall Upgrade &#038; Network Refresh Project"},"content":{"rendered":"<p>The Information Security and Network Services teams will be upgrading the IS&amp;T Data Center to improve security\u00a0 and sustainability.<\/p>\n<p><span>Phase One of the firewall upgrade, which took place during the Summer of 2022,\u00a0 replaced the existing Cisco equipment with Palo Alto firewalls. Phase Two will provide expanded coverage and enhanced level of security for all applications resident in the Data Center.<\/span><\/p>\n<p>The network refresh, expected to begin in October 2022, will be replacing older Cisco networking equipment to ensure ongoing vendor support.<\/p>\n<p>Both initiatives are being coordinated to minimize the impact to Data Center clients throughout the activities.<\/p>\n<div class=\"bu_collapsible_container \" aria-live=\"polite\" data-customize-animation=\"false\"><h3 class=\"bu_collapsible\" aria-expanded=\"false\"tabindex=\"0\" role=\"button\">Project Timeline - Network Refresh<\/h3><div class=\"bu_collapsible_section\" style=\"display: none;\">\n<p><a href=\"\/tech\/files\/2022\/08\/DC-FW_Update_20220825.png\"><img loading=\"lazy\" src=\"\/tech\/files\/2022\/08\/DC-FW_Update_20220825.png\" alt=\"\" width=\"2060\" height=\"1103\" class=\"alignright wp-image-141638 size-full\" srcset=\"https:\/\/www.bu.edu\/tech\/files\/2022\/08\/DC-FW_Update_20220825.png 2060w, https:\/\/www.bu.edu\/tech\/files\/2022\/08\/DC-FW_Update_20220825-636x341.png 636w, https:\/\/www.bu.edu\/tech\/files\/2022\/08\/DC-FW_Update_20220825-1024x548.png 1024w, https:\/\/www.bu.edu\/tech\/files\/2022\/08\/DC-FW_Update_20220825-768x411.png 768w, https:\/\/www.bu.edu\/tech\/files\/2022\/08\/DC-FW_Update_20220825-1536x822.png 1536w, https:\/\/www.bu.edu\/tech\/files\/2022\/08\/DC-FW_Update_20220825-2048x1097.png 2048w\" sizes=\"(max-width: 2060px) 100vw, 2060px\" \/><\/a><\/p>\n<p><\/div>\n<\/div>\n<br \/>\n<div class=\"bu_collapsible_container  bu_collapsible_open\" aria-live=\"polite\" data-customize-animation=\"false\"><h3 class=\"bu_collapsible\" aria-expanded=\"false\"tabindex=\"0\" role=\"button\">Data Center Firewall Upgrade to Palo Alto<\/h3><div class=\"bu_collapsible_section\" ><\/p>\n<ul>\n<li>Phase One &#8211; Completed 8\/9\/2022<\/li>\n<li>Phase Two &#8211; To be determined<\/li>\n<\/ul>\n<p><\/div>\n<\/div>\n<br \/>\n<div class=\"bu_collapsible_container \" aria-live=\"polite\" data-customize-animation=\"false\"><h3 class=\"bu_collapsible\" aria-expanded=\"false\"tabindex=\"0\" role=\"button\">FAQs<\/h3><div class=\"bu_collapsible_section\" style=\"display: none;\"><\/p>\n<p><strong>How will the Data Center Firewall project impact my service or application?<br \/>\n<\/strong><span data-contrast=\"auto\">All firewall rules and configuration items will be copied from the existing Cisco platform to the new Palo Alto platform in advance of the scheduled migration date. During the change window of your scheduled conversion date, network routing will be changed to pointed to the new Palo Alto platform. Due to the nature of this change there will be a brief network outage which may impact connectivity.\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><strong>How will I know if my service or application is working properly with the new Palo Alto firewall?<br \/>\n<\/strong><span data-contrast=\"auto\">The project team will perform high level testing to validate rules are in place and traffic is passing as expected. As an application or service owner, you will need to develop test plans to execute both before (for baseline) and after migration to validate performance is as expected. After migration, should you note any anomalies with your service or application, please open a ticket with <\/span><a href=\"mailto:ITHelp@bu.edu\"><span data-contrast=\"none\">ITHelp@bu.edu<\/span><\/a><span data-contrast=\"auto\">\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\"><strong>How will I know when my service or application is being migrated to the new Palo Alto firewall?<\/strong><br \/>\n<\/span><span data-contrast=\"auto\">A schedule is being developed to prioritize the movement of all services and applications. We expect to migrate 3 to 4 VLANs\/subnets per change window over an 8-week span using two change windows per week (total of 16 separate migration windows) with an expected start date of July 5<\/span><span data-contrast=\"auto\">th<\/span><span data-contrast=\"auto\"> for the first production migration. Once finalized, the schedule will be published on the project TechWeb page, and a broadcast message sent to all IS&amp;T. Specific service and application owners will be notified individually two to three weeks in advance so we can coordinate any other activities that may be planned. Although every effort is being made to identify impacted service and application owners, records may be incomplete therefore we recommend checking the posted schedule and reaching out to the project manager <\/span><a href=\"mailto:cherimaw@bu.edu\"><span data-contrast=\"none\">cherimaw@bu.edu<\/span><\/a><span data-contrast=\"auto\"> if you do not receive an advance notice.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span><\/div>\n<\/div>\n<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Information Security and Network Services teams will be upgrading the IS&amp;T Data Center to improve security\u00a0 and sustainability. Phase One of the firewall upgrade, which took place during the Summer of 2022,\u00a0 replaced the existing Cisco equipment with Palo Alto firewalls. Phase Two will provide expanded coverage and enhanced level of security for all&#8230;<\/p>\n","protected":false},"author":6621,"featured_media":0,"parent":114716,"menu_order":1,"comment_status":"closed","ping_status":"closed","template":"","meta":[],"_links":{"self":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/140544"}],"collection":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/users\/6621"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/comments?post=140544"}],"version-history":[{"count":15,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/140544\/revisions"}],"predecessor-version":[{"id":141643,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/140544\/revisions\/141643"}],"up":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/114716"}],"wp:attachment":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/media?parent=140544"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}