Security

Departmental Firewalls

On This Page

Overview

Departmental firewalls are available to provide a second level of protection in addition to the campus firewall. Departmental firewalls are required in some cases to comply with Payment Card Industry (PCI) standards.

The Division of IT provides equipment and support for departmental firewalls, installs and configures them, and acts as the point of contact for rule changes.

Departmental Firewalls run Packet Filter (PF), OpenBSD's TCP/IP traffic filtering system. This system creates a stateful firewall capable of complex rule sets.

Getting Started

See the Request section for information on requesting a departmental firewall.

Help and Support

For more information on installing a departmental firewall, please send an email to firewall@tamu.edu.

Related Services

Cost

Texas A&M University System FY19 Rates displayed below.
View FY18 and FY19 TAMUS Auxiliary and Non-TAMUS Rates.

Service Description Unit Rate in $ Item Code/Product/Service
Firewall (up to 1 GBPS) Month 103.00 FIREWALL
Firewall for NSA 6600 Each/Year 5,715.00

FIREWALL NSA6600-4G

Firewall for NSA E9800 Each/Year 13,335.00

FIREWALL E9800-10G

Additional Details

The cost for installing a departmental firewall varies based on the complexity of the network infrastructure.

Request

To request a departmental firewall, send an email to firewall@tamu.edu.

Before installing the departmental firewall, the Network Engineering Team will determine if any network architecture changes are needed. Changes may be needed in order to isolate your department or lab in preparation for the firewall. In addition, IT Security will review any current campus firewall settings for hosts you own in Infoblox. The time required to install a departmental firewall varies based on the complexity of the network infrastructure.

If you process Credit Cards, other Payment Card Industry requirements must be met.

Updates and Support

Currently, rule change requests should be submitted by emailing firewall@tamu.edu. A new web interface for rule changes is being developed. Department administrators may use this interface to make rule changes on non-PCI firewalls. PCI Firewall rule change requests will continue to be submitted to firewall@tamu.edu.

For privacy reasons, access to firewall logs is limited. However, if a network event requires investigation, the Division of IT will work with you to extract the relevant logs.

Back to Top