Enterprise Email

Standard

Exchange

• State of Illinois standard email address (@illinois.gov) with full mailbox features including Calendaring, public folder access, shared mailboxes and resources, distribution lists and Archival retention 
• High availability service with disaster recovery
• Unlimited storage
• Secure routing of email to external sources with a maximum send/receive size of 35 MB per message
• Age limit on 'Deleted Items' folder is 14 days. Deleted item retention is 14 days from the time removed from the Deleted Items folder
• Mobile device management support to allow email on secure mobile devices. This includes approved personal devices allowed via the Bring Your Own Device policy 
• Includes support for any Outlook client 2007 and above, Outlook Web Access and Outlook Anywhere (Web Access can be modified/omitted per department or mailbox)

Security

• Statewide email will maintain current virus and SPAM definition files and filtering rules on the messaging servers to provide protection against external as well as internal attacks.  Quarantine services are provided to allow potential SPAM to be reviewed
• Secure web delivery methods are available to ensure email is transported securely to external sources
• The Internet Mail Gateway is configured to block attachment extensions which pose a risk to resources on the network. DoIT reserves the right to apply filters on certain types of files if the file type poses a risk. A file transfer utility is available to securely transport these file types (filet.illinois.gov).
• Access to each mailbox requires a valid user ID and password.  A domain trust can be configured between the Statewide Enterprise email domain and the department's domain.  This will allow single sign-on and department managed password policies.  All email accounts are subject to the Statewide password policy (i.e., change every 60 days, cannot use any of previous last 12, must use 3 of the following 4 character types:  uppercase, lowercase, numbers or symbols)
• 3rd-party messaging applications (for example, AOL Instant Messenger, Microsoft HotMail) products are a security risk.  It is strongly suggested that departments create policies that discourage the use of 3rd-party messaging applications

Backups

• A continuous replication to an offsite location, including a lagged database copy, is in place for recovery

• Service provisioning and implementation
• Incident resolution
• Routine maintenance
• Provide access, provisioning and support of users mailboxes
• Notify all users of scheduled maintenance windows at least 48 hours in advance (outside of standard outage window of 2nd & 4th Friday & Saturday 22:00 - 3:00)
• Ensure mailboxes can be restored due to database issues or disasters. 
• Ensure proper and secure routing of email
• Provide security to block mail which poses a risk to the resources on the network

• Develop and implement agency governance to ensure staff compliance with DoIT incident reporting and request requirements
• Train employees on effective use of the mail client software
• Ensure the Department maintains current version and patches of email related workstation software
• Install, run and maintain current versions of anti-virus software and virus definitions for all clients that will connect to the email servers
• Budget appropriate funds to cover costs of email subscriptions for the Department