The URL can be used to link to this page

Home My WebLink AboutContract 30986CITY SECR� IAR�`r . CC�RITRA�1' IV� � , I,IlVII�'ED ACCESS AG12EElVIENT A.1VD EXTI2AN�T' CONNECTIOI�T STA.NDAI2D This Limited Access Agreement ("Agreernment") is made and entered into by and between the City of Fort V4lorth ("Fort Worth'°), acting by and through its duly authorized Assistant City Manager, and the City of Bur�eson ("Burl�so�"), a,cting by and through �// f��v/�II`t , its duly authorized �/� Gin��.� WHERAS, the City of Fort Worth ("Fort Worth") and the City of Burleson ("Burleson") entered into City Secretary Contract No. 26701 where Fort Worth provides Library and patron services to Burleson; and �VHE�2AS, Fort Worth ovvns and operates a file server computer system and network (collectively the "Netv�vork") and wishes to protect its netvvork by limiting third party access; and �'HEREAS, Burleson ("Burleson") wishes to have continued access to a subset of Fort Worth's network, specificaliy, the Integratec� Library System ("II,S �yst�m"), for library and patron services; and �'VH�laE�iS, Burleson needs access to Fort Worth's II,S System and may need access to Internet services in conjunction with use of the ILS system; and VVH��AS, Fort Worth is willing to grant Burleson continued access to the Network and the ILS System, subject to the terms and conditions set forth in this Agreement. NOW 'Ir�Id��ORE, Fort Worth and Burleson hereby agree as follows: 1. Grant oi I,imi�ed Aecess 1.1 Access Burleson is hereby granied a limited right of access to Fort Worth's Network for the sole purpose of utilizing Library and patron services provided under this Agreement. Burleson's public libraries will continue to receive access and be linked to the ILS System to ihe e�eni provided in E�hibit "A." Burleson can only enter the Network via Fort Worth's camputer system; therefore, Fort Worth will provide Burleson with a password and access number or numbers as necessary to perform Burleson's duties. 1.2 Hardware All hardware, circuits, and related gear covered under this Agreement should be placed in secure location; clearly marked. Fort Worth personnel should be provided access to all hardware through the desigr�ated POC. �_ , -, ;;� �- ; �rrJ:.�J, l ; �'v� `:�� ` !',v 7 ; ' .; :� ¢, �,;� r�; ^p,;,,7 ''� �� L� J 1;1��=.',�:'� ��`;�;��;^; �; iU j( �`( � :':�✓k:�fl� U'�.G�So 2. 3. C� De�initions Circuit For the purposes of this Agreement, circuit refers to the method of network access, whether it is through traditional ISDN; Frame Relay etc. or via Virtual Privacy Network (VPN) encryption technologies. Sponsoring Organization Thirri Party I�Tetwork Restrictions Fort Worth Public Library (k'WPL} is the sponsoring orga.nization that has requested that the third party cities gain access to the FWPL ILS System and the City of Fort Worth network. A business or entity that is not a formal or subsidiary part of the FWPL or the City of Fort `North. 301. Burleson may not share any passwords or access number or numbers provided by Fort Wortb except with Burleson's officers, agents, servants or employees who work directly with this project. 3.2. Burleson may not access the Network for any purpose other than those set forth in this Agreement. 3.3. Burleson acknowledges, agrees and hereby gives its authorization to Fc�rt Worth to monitor and or perform an annual or semi-annual audit of Burleson's use of Fort Worth's Network in order to ensure Burleson's compliance with this Agreement. Fort Worth will provide at least thirty (30) days written notice of any intent io conduct such audit. 3.4. A breach by Burleson, its officers, agents, servants or employees, of this Agreement and any other written instructions or guidelines that Fort �Torth provides to Burleson pursuant to this Agreement, shall be grounds for Fort Worth immediately to deny Burleson access to the Network and �urleson' s data. Fort �Jtjorth may also exercise any other remedies that Fort Worth may have under this Agreement or at law or in equity. � �'laird Pa�-tv Conneetion Conr�ections between Fort Worth and third parties that require access to the Fort Worth's resources fall under this standard, regardless of whether a telecommunications circuit (such as frame relay or ISDN) or Virtual Prrvacy Network (VPN) technology is used for the connection. All new connection requests between third parties and the ��,, ,, , ,� � � � ,,2� , ,l �,�� O��,; ,:; r�J,:-1_'. �. ��, �.� r�7 ',� t.il�,2��,)� II:'� �,�•�.1� Z i� l :; ::L �. ...'�J '� >� ;,,�L� �,�� `�'�"�';�.L�l� � ;,C.: �� . �� sponsoring organization require that representatives of the third party and the sponsoring organization are in agreement regarding the connection. 5. Securitv Review All new eAtranet connectivity will go through a security review with the Information Security department (IT Solutions) either annually or semi-annually to insure that the connection is consistent with this agreement. The reviews are to ensure that all access matches the business requiremen�ts in the best possible way, and that the principle of least access is followed. 6. Point of Contact The sponsbring organi�ation must designate a person to be the Point of Contact (POC) for the Extranet cannection. The POC acts on behalf of the sponsoring organization, and is responsible for those portions of this policy as they may relate to the Access agreement. A second POC should also be listed. In the event that the POC changes, IT Solutions must be informed promptly. Fort Vdorth will contact the POC for security audiis of facilities and services covered by this agreement. Fort �h7orth's primary contact for the auditing process shall be the Manager of Information Security for the City of Fort Worth. 7. Establishin� Connectivitv The sponsoring organization should provide secure facilities for network gear and wark with the Fort Worth staff to initiate and secure the connectivity. All conn�ctivity established must be based on the least-access principle, in accordance with the approved business requirements and the security review. Fort Worth relies upon the third party to take reasonable precautions for protecting Fort Worth's network from exposure to virus infection, malware, or any other security threat. Reasonable precautions include, but are not limited to, keeping virus protection up to date within the sponsoring organization's network and maintaining security patches and fixes on patron workstations. Virus file definitions should be updated on a weekly basis through an automated process. In general, security patches and fixes should be applied rrainimally every three months and critical updates should be implemented within one month of release. Neglecting to take reasonable precautions may result in denial of access to the Network. The �ity of Fort Worth may consult and assist with ma.intaini_ug these reasonabl� precautions if resources are available; however, Fort Worih is not responsible for or obligated to guarantee such precautions. It is �urieson's responsibility to maintain a secure environment. $. 1dIodifving or Changin� Connectivity o�- r�ccess All changes in access initiated by Burleson must be accompanied by a valid business justification, and are subject to security review. Any changes to be implemented to Fort Worth's Netu�ork must adhere to Fort Worth's Change Management Process. A copy of the Change Management Process is available upon request. The sponsoring organization is responsible for notifying IT Solutions when there is a material chaa�ge in � �:,r11�..�):..IL ,\�s��,��i, .Sv��✓ :J i r� � �,�� l r �, � �� , ^ ` � � �:-7 :"� L �� '1: ��, 3 ; �� .. � .. . '';,;; ^ ^,�U r,; `�i __ -- �===.�i�l17=�� their origtnally provided informaiion so that security and connectivity evolve accordingly. 9, Terminating Access When access is no longer required, Burleson must notify Fort VJorth in writing within si�ty (60) days. This may mean a modification of existing pernussions up to and including terminating the circuit, as appro�riate. If during the course of an audit of the facilities and services providEd to Burleson, the connections are found to be deprecated, or are being used in a manner inconsistent with this agreement, access may be terminated immediately. IT Solutions will notify the POC or the sponsoring organization of the change prior to taking any action. , ,` ��CUT'El) in multiples this �� '��'� day of ��y0 �l� � )li.� �;� 20 �� CI'T�' OF F�RT �OR'I'�: CIT�' OF BUIdLES�1�T: � �, f �� ` � i � B : \� BY� Y i ` L�ats�rt � � �� t.�: i.� � - � , �.. � � ��,�- Name:/�i / � ��r � �s c:/) Assistant Citq 1Vlanager Title: ('�t �, /Y�GiI"' �� ATTEST` ATTEST: . �? B I �; , By: y. . Marty Hendrix Name: ' rKf�S��` City Secretary Title: C� APPROVED AS TO FORlO�I AND LEGALITY: B � '��'1 y: Maleshia B Farmer Assistant City Attorney M & C: � � 0 ��" , � � ' �-' j � r r' �^� � ( „'f f J v,±,! � 11 z v l': j',�� -:1 �� ,.?��,�e �;,, � if J i� l� C' {�i'd.� :� II'.-.1': � y� .,'r',!^ C/S�U, p �U� ..v1.u11� J!�s��, � � � � � �. � � �.,,_ .}.r Q � tf7� �. .�. r � � � � � � � � � '�"' � � •� � � � �s �. L��''''''�� ' A�' �W !A � � � aJ � � � � �' � �.� � �� c �o � � �o � � c� �i � ,-�` � �' U � � � � � � � � . � � +� � .� � ` :�a� � � c � � � � -� � a �" v q> � � � �-- :�; "�3 � � � � � � �' � � � � �� . �S ;w,� i.� � ��, U �'� t!) U �, � Q C Q, � :�• _ . � � q3 :�'r i �� `� -�4 c� r � , � �. � ,� � � �1.� � , : �, - , �� .� � ��I� :�"��`.�:'Vri� ��.� EXHIBIT "B" LISTING OF FORT WORTH PUBLIC LIBRARY HARDWARE INSTALLED AT BURLESON PUBLIC LIBRARY Location: 248 SW Johnson Ave., Burleson TX 76028 Name Descri tion Com onents Contivity 1100 Nortel Networks Contivity Extranet . Memory: 128 MB RAM; Security Switch 1100 series 32MB Flash , • 300 MHz processor, • LAN/WAN interfaces: - 2 10/100BaseT Ethernet ports (RJ-45), - Management/console port (DB-9). • Contivity O/S with 5 tunnels and RIPv2 routing • Contivity Stateful Firewall; Baystack 470 Nortel Netwoks Baystack 470 . 48T Stackable Ethernet Switch series 48T Switches. .�. � _ 1 _ �,^ ^.--� ;:;��J��::J�� :'��:��:°:�; rr-' 1!' :��G p�: �t ��,� � ;�V�� !��-:1:: �� `?T:�J��n �'�i��.: � �• �