bSecure Departmental Firewall

A service overview and catalog of bSecure Departmental Firewall provided by the UC Berkeley IT Service Hub.

Description

This service provides network firewalling with advanced features to departments with IT infrastructure located anywhere on campus.

This firewall provides two zones, “outside” and “protected”. All customer subnets are connected to the single protected zone. Firewall policy can be created to control communication between the outside and protected zones but not between the individual protected subnets.
Each department or team receives a dedicated virtual system managed through a centralized web interface. Configuration can be as simple as allowing a specific port, or as complex as only allowing a specific application to communicate.
The addition of the firewall does not require the reconfiguration of existing servers. When implemented, customers identify which networks should be moved to a protected zone and they configure the appropriate security policy to support them.

This service is typically consumed as part of a package of related IT services for an application or set of systems hosted in a campus data center.

Firewall services are managed by the Berkeley IT Network Services team.
New Data Center and Departmental firewall services or changes to existing services can be requested via the Data Center and Department Firewall Service Request Form.
More information on support for campus networking and connectivity management services, including the data center firewall service offering is available on our Network Services Support Information.

Eligibility	This service is available to Faculty and Staff
Con tact	Please see Network Services Support Information for details on how to contact us.
Availability	Please see Network Services Support Information for availability expectation and support timelines.
Cost	There are no direct costs associated with this service.
Data Classification	This service is rated for Protection Level P4, Availability Level A4, and Recovery Level RL5 data. Compliance: Users are responsible for ensuring data handled within this service complies with the Data and IT Resource Classification Standards.