Attchmt_6c_-_Clearinghouse_IDM-6_5_Requirements.pdf

ATTACHMENT 6c

Original Requirements for Service Provider Hosting IDM Application

Service Provider shall install and maintain two servers provided by the Client for purposes of operating the IDM system. No other third party applications shall be run on these dedicated servers without Client’s written permission.

Service Provider shall provide the 24/7 support to the dedicated IDM servers with at least 99% of its availability over Internet.

Service Provider shall provide the focal point responsible for communication with the Client. The mail address, business and mobile phone numbers of the focal point person shall be provided.

The response time for the Client’s request should not exceed 2 hours

Service Provider shall be responsible for the full administration of the IDM servers in terms of installing patches and updates for MS Windows, Antivirus, MS SQL, and other standard software packages. All updates should be scheduled and performed only after confirmation received from the Client.

Service Provider shall provide the full antivirus and anti-spam protection of IDM servers.

The antivirus software should be scheduled to auto run daily at the time specified by the Client.

Service Provider personnel shall not make any modifications into the settings of Tomcat, MS SQL and IIS configured by Client and/or Service Provider specialists.

The Client and/or Service Provider personnel must be granted with terminal/remote access to the IDM application and database servers as well as with possibility to upload and download information from/to each of the servers. Specific connection terms shall be further determined with the Service Provider.

Statistics and Logs shall be provided periodically to the Client:

o Hourly statistics on incoming and outgoing data volumes, i.e. server access o Weekly network logs o Weekly antivirus logs

Service Provider shall perform a daily backup of the IDM MS SQL database.

To support the mailing delivery function of IDM application, Service Provider shall register the proper mailing address and provide to the Client with the IP address or the network name of the mailing server.

The IDM application server must obtain a fixed real IP address, which will not be mapped by any other firewall, proxy, etc.

The following ports on both Application and Database servers shall remain opened and not filtered for proper administration / IDM functionality:

o 80 port for Internet access o 3389 port for terminal service (client, and service provider subnets) o 25 port for mailing purposes o 1433 for MS SQL (only on Database Server) o 21 port for outgoing connections

2. PROPOSED NETWORK TOPOLOGY

2.1 Network Topology.

The figure above suggests the recommended network topology for the IDM Servers installation.

Notes:

1. The Application Server must possess a real IP address.

2. The same IP address must be used for accessing the server from Internet.

3. In case Client has a Firewall which stands in front of the IDM Servers, then:

a. The entire traffic (incoming and outgoing) for the port 80 must be able to pass through the Firewall transparently. The chance of scanning that traffic by any antivirus/antispyware programs must be excluded - these programs may drop the connections by mistake.

b. Only static rules in Firewall configuration settings must be applied for IDM servers.

4. Outgoing connections on port 25 must be provided to ensure mail delivery functionality by IDM.

5. In case an export of the data from these servers to some other central server is going to be needed, then outgoing connections on port 21 must also be provided.

Only under these circumstances can the Service Provider guarantee full functionality of the IDM Servers. Any other cases must be regarded as a client-specific practice.

3. IDM SERVER REQUIREMENTS

3.1. Hardware Recommended Requirements:

The database and the application should be installed on two separate servers. Below are the specifications for the servers.

CPU 2.0 GHz 6 core 12M Cache 1333MHz RAM 16 GB ( 2 x 8 ) 1333MT/s HDD 4 x 300GB 15K RPM SAS 6Gbps Hot-plug

NIC Quad port 1G with iSCSI Offloading

RAID Nonintegrated RAID controller with 512MB NVRAM

Power Supply Hot-plug, Redundant Power Supply 550W

OS Windows 2008 R2

Expansion Slots 2 x PCIe or 2 x PCI-X

Storage device Cisco NSS-324 4 TB UPS APC Smart UPS 2200 VA RM2U

3.2. Software Requirements

In order to have the IDM properly installed and fully functional, the following software products need to be pre-installed:

Software Product Comments Internet Information Services Is provided free of charge with MS Windows Apache Tomcat V 7.0.30 Is provided free of charge JDK v 1.7.0_07 Is provided free of charge JK 1.2 (Jakarta ISAPI Redirector) Is provided free of charge Microsoft SQL 2008 R2 Standard Edition CPU license.