<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="City"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="place"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PlaceType"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PlaceName"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
p.MsoAutoSig, li.MsoAutoSig, div.MsoAutoSig
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
span.EmailStyle19
{mso-style-type:personal-compose;
font-family:Arial;
color:windowtext;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal style='text-autospace:none'><b><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial;font-weight:bold'>Office of
Information Technology Customer Update – January 25, 2007<o:p></o:p></span></font></b></p>
<p class=MsoNormal style='text-autospace:none'><b><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial;font-weight:bold'><o:p> </o:p></span></font></b></p>
<p class=MsoNormal style='text-autospace:none'><b><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial;font-weight:bold'><o:p> </o:p></span></font></b></p>
<p class=MsoNormal style='text-autospace:none'><b><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial;font-weight:bold'>Emergency Network
Maintenance<o:p></o:p></span></font></b></p>
<p class=MsoNormal style='text-autospace:none'><b><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial;font-weight:bold'><o:p> </o:p></span></font></b></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:11.0pt;
font-family:Arial'>Cisco Systems, Inc, announced three software
vulnerabilities on January 24th. Most of OIT’s routers
and switches are running software versions that have one or two of these
vulnerabilities. No OIT routers and switches are running
IPv6, so the third vulnerably does not apply.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:11.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:11.0pt;
font-family:Arial'>While there have not been any cases of these vulnerabilities
being exploited yet, OIT is responding to these announcements by aggressively
upgrading software on devices and implementing mitigating filters on various
parts of the network. As long as there are not
reports of exploitation of these vulnerabilities and the mitigation filters
appear to be working, we will be aggressive, but work with due care, in our
router and switch upgrades. <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:11.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:11.0pt;
font-family:Arial'>This allows OIT to balance the risk of quick major
changes to the network with the risks of have vulnerable software on routers
and switches. Many times overreacting to
vulnerabilities can be more damaging than the vulnerabilities
themselves. <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:11.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:11.0pt;
font-family:Arial'>As with good network security response
practice OIT is working from the outside in, on upgrading the
network.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:11.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:11.0pt;
font-family:Arial'>We will first upgrade and mitigate the Internet Connection
Layer. This will protect the Internet Perimeter. We have
loaded upgraded software on the SOCC Internet Connection router, but have not
reloaded it with this new code. Later today we will load
upgrade software on the Rhodes Internet Connection router. By
doing this, OIT can quickly respond in an emergency manner if it becomes
required. The current plan for the Internet connection and
ohio.gov core follows:<o:p></o:p></span></font></p>
<p class=MsoNormal><strong><b><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'><o:p> </o:p></span></font></b></strong></p>
<p class=MsoNormal><strong><b><font size=2 face=Arial><span style='font-size:
11.0pt;font-family:Arial'>Friday January 26th from 5 AM to 6 AM</span></font></b></strong><o:p></o:p></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:11.0pt;
font-family:Arial'> <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:11.0pt;
font-family:Arial'>OIT will install mitigation filters on our Internet
connection routers on Friday, January 26th from 5 AM to 6
AM. We expect these mitigation filters to be
unnoticed by any customer with legitimate network traffic.
OIT will monitor the counters on these filters to verify that they are not
affecting any customer traffic. <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:11.0pt;
font-family:Arial'> <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:11.0pt;
font-family:Arial'>The filters will prevent attacks using the TCP Crafted
Packet vulnerability from the Internet to all OIT managed routers and switches,
and prevent attacks using the IP Options Crafted Packet vulnerability from the
Internet to any router and switch in the Ohio.gov Network. <o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><b><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial;font-weight:bold'>Additional
maintenance will be announced Friday, January 26<sup>th</sup> for our
maintenance periods scheduled on January 30<sup>th</sup>, February 6<sup>th</sup>
and February 13<sup>th</sup>.<o:p></o:p></span></font></b></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><st1:place w:st="on"><st1:PlaceName
w:st="on"><b><font size=2 face=Arial><span style='font-size:11.0pt;font-family:
Arial;font-weight:bold'>Ohio</span></font></b></st1:PlaceName><b><font
size=2 face=Arial><span style='font-size:11.0pt;font-family:Arial;font-weight:
bold'> <st1:PlaceName w:st="on">Customer</st1:PlaceName> <st1:PlaceName w:st="on">Service
& Security</st1:PlaceName> <st1:PlaceType w:st="on">Center</st1:PlaceType></span></font></b></st1:place><b><font
size=2 face=Arial><span style='font-size:11.0pt;font-family:Arial;font-weight:
bold'> - After Hour Service Escalation Procedure</span></font></b><font size=2
face=Arial><span style='font-size:11.0pt;font-family:Arial'><o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'>Effective immediately, the following
after hour (Monday through Friday, 5:00pm – 7:00am and Weekends)
escalation list should be utilized when service related matters need to be
brought to the attention of UNS-NA management.<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'>Customers should wait a minimum of
30 minutes before attempts are made to contact the next level of support<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><st1:place w:st="on"><st1:PlaceName
w:st="on"><b><font size=2 face=Arial><span style='font-size:11.0pt;font-family:
Arial;font-weight:bold'>Ohio</span></font></b></st1:PlaceName><b><font
size=2 face=Arial><span style='font-size:11.0pt;font-family:Arial;font-weight:
bold'> <st1:PlaceName w:st="on">Customer</st1:PlaceName> <st1:PlaceName w:st="on">Service
& Security</st1:PlaceName> <st1:PlaceType w:st="on">Center</st1:PlaceType></span></font></b></st1:place><b><font
size=2 face=Arial><span style='font-size:11.0pt;font-family:Arial;font-weight:
bold'> <o:p></o:p></span></font></b></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'>Voice: 644-0701 (<st1:City w:st="on">Columbus</st1:City>
Calling Area) or 800-644-0701 (Outside of the <st1:City w:st="on"><st1:place
w:st="on">Columbus</st1:place></st1:City> Calling Area)<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'>After Hour Service Escalation<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'>1. UNS-NA Service
Manager
(614) 216-1621<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'>2. UNS-NA Program
Manager (614)
466-6516<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'>3. UNS-NA Program
Administrator (740) 398-1333<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'>________________________________________________<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><b><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial;font-weight:bold'>Customer
Suggestions:</span></font></b><font size=2 face=Arial><span style='font-size:
11.0pt;font-family:Arial'><o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'>Please send your suggestions for
improving our network services to: E-mail: <a href="mailto:OCSSC@ohio.gov">OCSSC@ohio.gov</a><o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><st1:place w:st="on"><st1:PlaceName
w:st="on"><b><font size=2 face=Arial><span style='font-size:11.0pt;font-family:
Arial;font-weight:bold'>Ohio</span></font></b></st1:PlaceName><b><font
size=2 face=Arial><span style='font-size:11.0pt;font-family:Arial;font-weight:
bold'> <st1:PlaceName w:st="on">Customer</st1:PlaceName> <st1:PlaceName w:st="on">Service
& Security</st1:PlaceName> <st1:PlaceType w:st="on">Center</st1:PlaceType></span></font></b></st1:place><b><font
size=2 face=Arial><span style='font-size:11.0pt;font-family:Arial;font-weight:
bold'> (OCSSC):<o:p></o:p></span></font></b></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'>Voice: 644-0701 (<st1:City w:st="on">Columbus</st1:City>
Calling Area) or 800-644-0701 (Outside of the <st1:City w:st="on"><st1:place
w:st="on">Columbus</st1:place></st1:City> Calling Area)<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'>E-mail: <a
href="mailto:OCSSC@ohio.gov">OCSSC@ohio.gov</a><o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:11.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:11.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
</div>
</body>
</html>