Site-to-Site Virtual Private Network (VPN)

Standard

Connectivity

• ​VPN connectivity that is efficient and reliable
• Redundant, centralized VPN concentrators to facilitate IPSec VPN tunnels with remote networks through the Internet
• "Pre-shared keys" are used for VPN authentication "pre-shared keys"

​Security and Reliability

• ​Implemented and enforced VPN access security policies
• Adherence to security policies through routers, firewalls, VPN appliances, etc.
• Security administration services

Features Not Included

Third-Party Coordination

• ​Each third-party service provided is responsible for the procurement and maintenance of the connection, between a customer agency and the customer agency's Internet Service Provider, accessing the Internet up to the remote network's end of the Site-to-Site VPN tunnel
• The third-party will be responsible for the procurement, installation and support of any VPN equipment required at their location

• Service provisioning and implementation
• Incident resolution
• Routine maintenance
• Configuration of access control services on network hardware
• After-hours support of firewall and security services
• Technology refreshes, maintenance, configuration, administration and support of network infrastructure
• Proactive monitoring of the infrastructure
• Firewall security maintenance and administration support as well as configuration and monitoring
• Coordinate customer notification of planned maintenance and outages
• Provide network service in an efficient and economical manner - to include using bandwidth monitoring statistics to justify enhancements
• Maintain the integrity and security of the State Networks by shutting down ports that have been compromised or otherwise violate network security policies

• Develop and implement agency governance to ensure staff compliance with DoIT incident reporting and request requirements
• Ensure Site-to-Site VPN services are not used for personal or other matters that do not pertain to official business needs
• Report significant changes in business operations that may influence Site-to-Site VPN services
• Report changes in service performance in a timely manner to allow for accurate and speedy diagnostics
• When ordering, provide detailed information on what resources are required to be accessed, including IP addresses as well as technical contacts that network services staff can work with in establishing and supporting the service