TRITECH SOFTWARE SYSTEMS -2015 - Laserfiche WebLink

Home Browse Search

Chapter 2 — Networking, Security, and Support Connectivity / NIC Cards—NIC cards should not beset to "auto; they should beset to the highest matching speed applicable for the network and set to "full duplex." Due to the mission critical nature of CAD, TriTech strongly recommends an isolated network. While some TriTech customers have implemented their Inform CAD system as part of a broader network infrastructure, most of these customers have experienced problems secondary to outages and changes that had an unexpected and undesirable impact on the CAD system. TriTech recommends that two (2) active directory servers/domain controllers (DC) be deployed on the Inform CAD network for redundancy. Both DC's should be running on servers with RAID 1 or RAID 5 disk configurations. Both DC's should be Global Catalogs, per Microsoft's "best practices" recommendation. / DNS - TriTech recommends that the CAD system have its own DNS servers for name resolution and not rely upon a shared server used by the broader City network. DNS should be installed on both domain controller servers. / DHCP — While TriTech does not recommend the use of dynamic IP addresses, if DHCP is utilized, each DC should have its own scope. 3.2 SERVERNVORKSTATION PERMISSIONS Windows user accounts used to log in to servers and workstations should not be the same accounts utilized for the Inform Database Server or Inform Business Servers that maintain running applications if account lockouts are enforced due to password retries or other user -related security. Accounts should be specific to an individual or group of machines and not accessible for systems outside of the Inform CAD system. (Email, Web Sites, Other agency resources). The Inform CAD and Inform Systems have been developed to operate within a defined framework of network security access. The following are the minimum standards. 3.2.1 SUPPORT AND INSTALLATION ACCOUNT TriTech requires a domain account that is also a local administrator in order to install, upgrade and support the overall system. This account is typically named "TriTech". This account should be separate from the account used below for the Server Based Applications. 3.2.2 INFORM CAD DATABASE SERVER TriTech requires a domain account that is also a local administrator (same as the support account) in order to install, upgrade and support the Inform CAD Database Server. TriTech recommends a separate domain account. If necessary, the domain account can be the same account used below for the Server Based Applications. TriTech requires access to the SQL Server (TCP port 1433). The System Administrator (SA) account for Microsoft SQL Server is required by TriTech for installation, support and upgrades. 3.2.3 INFORM CAD AND INFORM INTERFACE AND BUSINESS SERVERS There are two (2) types of network accounts needed for these types of servers: The contents of this material are confidential and proprietary to TriTech Software Systems, Inc. and may not be reproduced, published or disclosed to others without the prior written consent of TriTech Software Systems, Inc. ©2015 TriTech Software Systems