subscribe to an MFN-2 network service such as WAN, MAN, or broadband in order to qualify for subscribing to ancillary managed security services. Security Monitoring and Reporting The security event monitoring and reporting service is provided to customer-owned equipment and includes: Firewall event monitoring and reporting Session border controller monitoring and reporting Network intrusion detection or prevention system monitoring and reporting Device monitoring and reporting (servers, routers, switches) Security Device Lifecycle Management Service The security device lifecycle management service offers a solution for lifecycle management of customer-owned, premise-based security appliances. In addition to monitoring the availability and performance of the security appliances, this service also offers integration with the enterprise Security Information and Event Management (SIEM) and is monitored 24 hours a day, seven days a week, 365 days a by the MFN-2 NOC/SOC. Vulnerability Management and Compliance Service The vulnerability management and compliance service identifies exposures and weak spots in customer environments by performing continual, accurate, external and internal scanning across the MFN-2 network. Vulnerability results are integrated into the enterprise SIEM solution ArcSight. ArcSight is available via the MFN-2 Customer Portal (see Section 8.5 for more information). Log Retention Services The log retention service supports a wide range of sources, allowing the capture and aggregation of millions of logs generated every day by critical information assets such as servers, routers, firewalls, databases, applications, and other systems. Next Generation Content Filtering/URL Blocking Service The Next Generation content filtering/URL blocking service helps end-users enforce their protection policies and block inappropriate, illegal, and dangerous web content. This service has the ability to block multiple categories of objectionable web content, providing the necessary combination of control and flexibility to protect important resources. Security Response and Consulting The MyFloridaNet-2 end-user will have access to a threat intelligence research team to assist in identifying threats and developing preventative counter measures based on information collected from monitoring events world-wide. Service Level Agreements (SLA) Overview The MyFloridaNet-2 infrastructure and services is backed by stringent network performance and operational service commitments. These commitments are based upon guaranteed response times and
Changes that can be requested via an MFN-2 NOC trouble ticket will be completed within two hours of creation of the ticket for the list provided in the tables below. Exception to the two hour change completion is noted below. 6.41. MFN-2 Managed Option MFN-2 MANAGED ORDER REQUIRED (CSAB) MFN-2 TROUBLE TICKET MFN-2 ELEMENTS AND FEATURES ESTABLISH NEW CHANGE EXISTING ESTABLISH NEW CHANGE EXISTING LAN IP addressing maintained by DMS Yes Yes No No LAN IP addressing provided by agency No No Yes* Yes* VRF Type – Private, Common, and Public or VRF-Lite Yes Yes No No Encryption (Static) Yes No No Yes Dynamic VPN Tunnels Yes No No Yes Non-IP Traffic Yes No No Yes Multicast Yes No No Yes Vendor Managed CPE Yes Yes No No Customer Managed CPE Yes Yes No No ACL, DHCP, and LAN Routing Protocols ** ** ** ** IOS Firewall Yes No No Yes Firewall Services (Embedded) Yes No No Yes QoS type – Voice, Video, Application Yes No No Yes NAT Yes No No Yes IP Helper Address (add/change) No No Yes Yes LAN Interface Settings (Speed, Duplex, VLAN changes) No No Yes Yes IP Accounting (Troubleshooting Aid) No No Yes Yes Route Cache Flow (Troubleshooting Aid) No No Yes Yes Add Static Route No No Yes Yes DNS Record Update No No Yes Yes Table 6.42. Customer Managed Option