2017 044 Ordinance - Laserfiche WebLink

Home Browse Search

~~' ° ~oroRO~a Essential Plus Services This Statement of Work ("SOW") is subject to the terms and conditions of Motorola's Professional Services Agreement, Service Agreement or other applicable agreement in effect between the parties ("Agreement"). Motorola and Customer may be referred to herein individually as a "Party" or together as "Parties" 1. Description of Security Monitoring Services 1.1. Anti-malware Monitoring ASTRO 25 comes installed with Anti-malware software ("SW"). Security Monitoring will verify that malware definition updates, as provided by the Anti-malware OEM, are installed and running. The anti- malware SW is monitored for activity such as deletion, quarantine, and alerting of suspicious SW. 1.2. Authentication Monitoring 1.2.1. Active directory (including domain Linux and RADIUS) and two-factor authentication log-ins are monitored. 1.3. Firewall Monitoring -The ASTRO 25 system potentially has several firewall options. See Table 1 in the addendum for a list. In any of these firewall applications, Motorola provisions and deploys the firewalls with the ASTRO 25 system. Motorola will monitor each one that has the firewall monitoring option. 1.4. IDS (Intrusion Detection System) Monitoring. An IDS is an option to ASTRO 25 that may be deployed between the ASTRO 25 firewall and the CEN. 1.5. Centralized Log Monitoring ASTRO 25 has an option that provides the ability to forward device syslogs to a single virtual server called Centralized Syslog Server. This allows monitoring of Linux components for authentication events. 2. Scope The Motorola Secure Operations Center (SOC) consists of highly trained and experienced security specialists. When an event is detected, the technologists will run remote diagnostics and initiate an appropriate response. This response could involve: continuing to monitor the event for further development, attempting to remotely restore the system, or opening of a case for dispatch of a field servicer ("Servicer"). 3. Motorola Responsibilities: 3.1. Provide, maintain, and replace when necessary, hardware ("HW") and SW required to monitor ASTRO 25 security elements. HW may include a firewall, router, or physical server. SW may include virtual servers either on the ASTRO 25 core or a separate physical server, related OS, SIEM collectors, and SW that allows distribution of updates and remote diagnostics. 3.2. Verify connectivity and monitoring is active prior to system acceptance or start date. 3.3. Coordinate with customer to maintain Motorola service authentication credentials. 3.4. Maintain properly trained and accredited technicians. Monitor the customer's system 24/7/365 for malicious or unusual activity. 3.5. Reports are posted to the SSC quality webpage. Contact your CSM for access. 4. The Customer has the following responsibilities: 4.1. Security Monitoring requires a connection from the customer's ASTRO 25 system to Motorola's SOC in Schaumburg. Motorola offers either a T1 option or a Virtual Private Network (VPN) option through a customer supplied Internet connection. 4.2. Allow Motorola continuous remote access to monitor the ASTRO 25 system. This includes keeping the connection plugged-in, providing passwords, and working with Motorola to understand and maintain proper administration privileges. Error! Unknown document Motorola Confidential Proprietary ©Motorola 2017 property name. 41-56