Educause Security Discussion mailing list archives

Re: Maintenance Window(s) Procedures


From: Buz Dale <buz.dale () USG EDU>
Date: Thu, 5 Jun 2008 17:00:29 -0400

 We have projects with differing uptime requirements,  Things like
firmware upgrades to routers and firewalls that affect multiple projects
are schedule during the downtime windows of the applications that are
impacted.
  We also try and use maintenance windows and notifications if we are
doing things that *might* impact an application.  Firewall rule changes
or routine config changes to core switches are schedule to minimize
those uh-oh moments.

We typically consider it maintenance if we make changes that could
inadvertently impact any service we consider "production." Those are
things like distance learning, network connectivity, payroll, etc.

Thanks,
Buz

Cal Frye wrote:
Buz Dale wrote:
What do you consider maintenance? Adding or removing ports from a
switch or changing access-lists on firewalls count?

We have different windows for different projects.  When multiple
projects may be affected we use the most restrictive window.

For purposes of this question, I guess I assumed "scheduled maintenance"
equals "scheduled downtime" -- items that don't result in downtime don't
have to be scheduled.

--
Buz Dale                                buz.dale () usg edu
IT Security Specialist              1-888-875-3697 (In GA)
1-706-583-2005
Office of Information and Instructional Technology
University System of Georgia
GMT -5:00

Current thread: