TRITECH SOFTWARE SYSTEMS -2015 - Laserfiche WebLink

Home Browse Search

Chapter 2 — Networking, Security, and Support Connectivity TriTech staff needs direct access to CAD SQL servers (TCP port 1433) with the SQL System Administrator (SA) account. 7.4 FILE TRANSFERS TriTech staff needs to have the ability to transfer files to computers running TriTech applications at a customer site. With most customers, TriTech staff is allowed to map drives directly over the VPN connections after being successfully authenticated in the CAD domain. The following ports need to be open to allow file sharing in Microsoft environment: TCP ports 139 and 445, EDP ports 137 and 138. These ports are identified in the Firewall Port Configuration Diagram in Section 5. An alternate, but not recommended method of transferring files is via Microsoft Remote Desktop Connection (RDP). This method is not meant for large file transfers and could significantly delay support efforts (double the time to transfer files) in the case of a critical issue with the CAD system, including CAD down. TriTech has implemented procedures and technology safeguards to limit access to customer systems and customer data. These procedures are described below: 8.1 TRITECH PERSONNEL AUTHORIZED FOR SUPPORT CONNECTIVITY TriTech hiring process includes a background check to evaluate individuals who will have access to restricted and highly confidential information, customer records, technology and restricted sections of the building and/or customer sites via physical or electronic means. These individuals are typically members of the Customer Service, Product Management, Engineering, or Project Operations departments. Individuals lacking such approved security access are not provided access to customer login information, servers or devices containing customer data, or sections of the facility where such computers reside. As noted in Section 7.x.x, all Security Authorized personnel must logon to machines utilizing advanced authentication methods prior to initiating a connection to a customer site. 8.2 CUSTOMER DATA SECURITY Customer data is entrusted to TriTech Software Systems with the expectation that the data will be managed, kept strictly confidential and disposed of in such a manner as to prevent access by any non-TriTech personnel or non -authorized TriTech personnel. Secure management of customer data is managed according to the following procedures: TriTech has deployed a secure technology infrastructure hosted at secure TriTech corporate facilities. TriTech facilities have the following protection features on site: / Monitored by security cameras. 1 Card key authentication required for building access. / Alarm system with individual staff access. / Secure server facilities with limited access (subset of TriTech Security personnel). / Secure sub -networks for storage of Client data and Client information. The contents of this material are confidential and proprietary to TriTech Software Systems, Inc, and may not be reproduced, published or disclosed to others without the prior written consent of TriTech Software Systems, Inc. ©2015 TriTech Software Systems