Departmental firewalls are available to provide a second level of protection in addition to the campus firewall. Departmental firewalls are required in some cases to comply with Payment Card Industry (PCI) standards.

The Division of IT provides equipment and support for departmental firewalls, installs and configures them, and acts as the point of contact for rule changes.

Departmental Firewalls run Packet Filter (PF), OpenBSD's TCP/IP traffic filtering system. This system creates a stateful firewall capable of complex rule sets.

Help and Support

For more information on installing a departmental firewall, please send an email to firewall@tamu.edu.

Contact Information


The cost for installing a departmental firewall varies based on the complexity of the network infrastructure.


To request a departmental firewall, send an email to firewall@tamu.edu.

Before installing the departmental firewall, the Network Engineering Team will determine if any network architecture changes are needed. Changes may be needed in order to isolate your department or lab in preparation for the firewall. In addition, IT Security will review any current campus firewall settings for hosts you own in Infoblox. The time required to install a departmental firewall varies based on the complexity of the network infrastructure.

If you process Credit Cards, other Payment Card Industry requirements must be met.

Updates and Support

Currently, rule change requests should be submitted by emailing firewall@tamu.edu. A new web interface for rule changes is being developed. Department administrators may use this interface to make rule changes on non-PCI firewalls. PCI Firewall rule change requests will continue to be submitted to firewall@tamu.edu.

For privacy reasons, access to firewall logs is limited. However, if a network event requires investigation, the Division of IT will work with you to extract the relevant logs.

Request This Service

Was this page helpful?