County of Ventura

COUNTY OF VENTURA

COMPUTING ARCHITECTURE STANDARDS

FEBRUARY 19, 2014

County of Ventura Computing Architecture Standards

TABLE OF CONTENTS

1. Executive Overview ...... 1 1.1. Purpose/Objective ...... 1 1.2. Architecture Document Updates/Maintenance ...... 1 2. Standard Categories ...... 1 2.1. Local Area Network (LAN) Servers ...... 1 2.2. Individual Personal Computer System ...... 1 2.3. Application Architecture ...... 1 2.4. Infrastructure ...... 2 3. Standard vs. Alternative Products ...... 2 4. Standard Adoption and Exception Approval Process ...... 2 5. Standards Currently Under Review ...... 3 6. Exemptions ...... 3

CHART I – Local Area Network Server Standards ...... 4 CHART II – Individual Personal Computer System Standards ...... 5 CHART III – Application Architecture Standards ...... 6 CHART IV – Infrastructure Standards ...... 8 Attachment A ...... 10

County of Ventura Computing Architecture Standards

1. Executive Overview

1.1. Purpose/Objective

The objective of Ventura County’s Computing Architecture Standards is to maximize countywide operational and cost efficiencies through the adoption of computing standards that facilitate countywide system interoperability, data sharing, volume purchasing, and leveraging of technology staff skills and training. County agencies and departments are responsible for adherence to the standards documented within the four charts contained within this document or obtaining approval for any exceptions from the Business Technology Committee (BTC).

1.2. Architecture Document Updates/Maintenance

This document is published by the County of Ventura’s Information Technology Services Department and will be revised as necessary based on recommendation from the BTC.

2. Standard Categories

This document is grouped into four Standard categories as follows:

2.1. Local Area Network (LAN) Servers

LAN Servers are typically Intel processor-based servers used to host one or more applications for a single agency or department. Chart I lists County standard equipment and software for such LAN servers.

2.2. Individual Personal Computers

Even though today’s operating systems support multiple logins, the personal computer is typically designed for use by one individual. Personal computers may be connected to a shared network (LAN) or may operate in a stand-alone mode. Chart II lists County standard equipment and software for personal computers.

2.3. Application Architecture

Applications Architecture ensures the suite of applications being used by an organization is scalable, reliable, available and manageable. Chart III enumerates these tools and standard special use applications. This includes both Browser- based and Client-server applications. Furthermore, a Service-Oriented- Architecture (SOA) is to be employed wherever practicable to facilitate faster and more cost effective development and integration of systems.

County of Ventura Computing Architecture Standards

2.4. Infrastructure

Infrastructure standards apply to Wide Area Network (WAN), Enterprise class servers and software, network components, network security components, Internet Access components, and remote access components such as those utilized for accessing the County network via a Virtual Private Network (VPN) connection. Chart IV lists County standards for Infrastructure equipment and software.

3. Standard vs. Alternative Products

Many of the product categories in this document show both Standard and Alternative product listings.

For all the products in this document identified as Standard, IT Services and representative agencies and departments have performed compatibility and usage tests and verified that the product will operate correctly within the County network (VCnet). Furthermore, IT Services commits to provide training to its staff to assist with configuration, training, installation, and follow-up support for Standard products.

Generally speaking, support for Standard products will be limited to the most recent commercially available version, and the immediate two prior versions. Any exceptions to this rule will be specifically called out in the event of incompatibility. Supported machine operating system versions will be specifically identified.

Alternative products do not share this same degree of confidence or support. In general, Alternative products should function properly within the County network (VCnet), but they have not been validated that they will in fact do so. Furthermore, because they are not County Standard products, IT Services does not commit to the same level of support for Alternative products as it does for Standard ones. Alternative products are identified in this document because it is recognized there may be unique, extenuating business requirements for a particular product that differs from the Standard. Alternative products are subject to the same approval and exception process as Standard products.

4. Standard Adoption and Exception Approval Process

LAN Server, Personal Computer, and Application Architecture standards are established and governed by a combination of IT Services, the BTC, and the County Information Technology Committee (ITC) using the process flow included as Attachment A: IT Standards and Deviations Approval Flow. Infrastructure standards are determined by IT Services based on individual product evaluations. Adopted Standard and Alternative products are primarily intended to govern new purchases. Unless otherwise specified at the time of their adoption, implementation of new standards may occur in a timeframe determined by individual agencies and departments, as new purchases are made.

County of Ventura Computing Architecture Standards

5. Standards Currently Under Review

Descriptions of County standards currently under review, if any, are shown below. If you require additional information or a status update please contact IT Services.

6. Exemptions

Three general exemptions from the standards within this document are:

6.1. Stand-alone, embedded-chip devices or systems used exclusively for department-specific applications (e.g. engineering, medical or public safety).

6.2. Existing or new County computing systems which, due to vendor support requirements are not able to adhere to the County’s current standards.

6.3. State or federal mandated computing systems.

Departments are authorized to confirm that a device or system qualifies for an exemption under one of the above categories. Departments and agencies are responsible for providing documentation supporting that confirmation in the event qualification for an exemption is in question.

County of Ventura Computing Architecture Standards

CHART I – Local Area Network Server Standards

February 2014

Category Standard Products Alternate Products Computer HP/Compaq Departmental Discretion (Network File Dell Server) Lenovo Directory Services Microsoft’s Active Directory (AD) Novell’s eDirectory

File/Print/Database Windows Server Server OS SUSE Linux Enterprise Server (SLES) Red Hat Enterprise Linux (RHEL) Novell Open Enterprise Server (OES)

Backup HP Data Protector ArcServe vRanger Symantec Backup Exec

Software Distribution Novell Zenworks Patchlink OS Virus Updates Microsoft Active Directory (AD) Microsoft WSUS Symantec Altiris Systems Dameware Departmental Discretion Management Bindview BV-Control Neoware EzRemote Microsoft Remote Terminal Services VNC Viewer VMWare Virtual Center

County of Ventura Computing Architecture Standards

CHART II – Individual Personal Computer System Standards

February 2014

Category Standard Products Alternate Products Computer See PC Price Guide - - n/a - (Desktop PC) https://usm.channelonline.com/com puwave/storesite/Login/?destination =/compuwave/storesite/ Operating System Windows 7 Pro (32 bit & 64 bit Windows VISTA, XP versions) Windows 7 Enterprise (32 bit & 64 bit versions) Office Suites Microsoft Office Corel Word Perfect Desktop Ergonomic RSI Guard Departmental Discretion Software Terminal Emulation Minisoft QWS3270 Powerterm Attachmate X Windows WRQ Reflection X - n/a - Anti-Virus Symantec EndPoint Protection Internet Browser Microsoft Internet Explorer Google Chrome (Web FireFox (Web application support application support may may vary) vary.) Project Management Microsoft Project Power Management Verdiem Surveyor - n/a - Diagramming/Drawing Visio Graphics/Photograph - n/a - Departmental Discretion Editors Document Presentation Adobe Acrobat Adobe Reader (Pro/Standard/Suite) Foxit eCopy PDF Pro Office

Laptop and Netbook Check Point Point Sec Full Disk Encryption Encryption Mobile Device Mobile Iron Departmental Discretion Management

County of Ventura Computing Architecture Standards

CHART III – Application Architecture Standards

February 2014 Category Standard Products Alternate Products Public-facing County Oracle Application Server 10G Portal - n/a - websites Joomla Microsoft .NET *Web Application Microsoft Visual Studio.NET Departmental Discretion Development PHP Windows Sharepoint Joomla Services Wordpress PowerBuilder Enterprise *Development Microsoft Visual SourceSafe - n/a - Version Control Mobile Application XCode, JQuery Mobile, Java, HTML5, Sencha Development CSS Web Server Microsoft IIS Microsoft IIS .NET Framework L.A.M.P. (Linux, Apache, MySQL, PHP) *Database Server Microsoft SQL Server MySQL Software Oracle *Ad Hoc Inquiry PowerSoft InfoMaker Departmental Discretion SAP Crystal Reports BusinessObjects *Data Modeling Sybase PowerDesigner Departmental Discretion Erwin *CASE Tools Sybase PowerDesigner Departmental Discretion Geographic ESRI ArcMap Information System (GIS) *Imaging/Storage Filenet P8 / ECM Centera Laser Fiche CPDI Identity and Access NetIQ Identity Manager - n/a - Management Computer QualysGuard - n/a - Vulnerability Assessment tool Thin Client Citrix ICA Client Departmental Discretion Computing Citrix Presentation Server Messaging Microsoft Exchange/Outlook - n/a - Novell GroupWise Wireless Email GroupWise Mobile Server - n/a - Server Virtualization VMWare ESX/ESXi Server Microsoft Hyper-V Server (Windows) Collaboration Microsoft Sharepoint System Novell Teaming Windows Sharepoint Services 6

County of Ventura Computing Architecture Standards

IT Asset Service-now.com Track-it Management Bindview Footprints Departmental Discretion * Applies to County-developed applications

County of Ventura Computing Architecture Standards

CHART IV – Infrastructure Standards

February 2014

Category Standard Products Alternate Products *Database Server OS HP UNIX 11.x - n/a - SUN Sparc/Solaris 10.x (Contact IT Services for machine sizing) *Database Server Sybase Adaptive Server Enterprise - n/a - Software Oracle Microsoft SQL Server Enterprise Backup HP Data Protector HP Storage Works HP Enterprise tape libraries Symantec Backup vRanger Exec Storage Array NFS - n/a - Solutions HP 3par Dell/Compellent Storage Systems Xanadu SAS (Contact IT Services for specific strategies) Local Area Network TCP/IP - n/a - (LAN) Protocols Network Management Nimsoft’s NimBUS product - n/a -  Agentless: SNMP  Agent: proprietary Robots/Probes Service-Now Discovery Routers & Data GigE configuration, Cisco, Avaya, - n/a - Switches HP, Nortel (consult IT Services - Network Services Div.) Network Cabling Fiber Optic: multimode/single mode - n/a - Copper Wire: category 6 station Cable wired to T568A standard UTP (Unshielded Twisted Pair) Gigabit Ethernet NIC Departmental Discretion - n/a - Contact IT Services – Network Services Div. before purchasing if fiber attachment required TCP/IP Printing HP External or Internal JetDirect - n/a - (Ethernet) Microwave Ceragon, Harris - n/a - Wireless LAN Cisco Lightweight Access Point - n/a -

County of Ventura Computing Architecture Standards

CHART IV – Infrastructure Standards (continued)

February 2014

Category Standard Products Alternate Products Remote Access Citrix Access Gateway (CAG) – - n/a - desktops/laptops Checkpoint VPN – mobile devices Firewall Check Point M2 Integrated Appliance - n/a - Cisco Catalyst FWSM Cisco Adaptive Security Appliances – Contact IT Services Security Officer E-Mail Firewall Axway – Contact IT Services Security - n/a - Officer Secure E-Mail Axway Secure Messenger - n/a -

County of Ventura Computing Architecture Standards

Attachment A

IT Standards & Deviation Approval Flow (Non-Infrastructure)

Standards Request & Deviations

IT Services IT Services Agencies and Departments

Summary Report & Recommendation

BTC

Summary Report & Recommendation

IT IT Services Community

Publication & Notification

Reject 12-18-2009

ITSD APPROVAL/NOTIFICATION GUIDELINES FOR IT PRODUCTS Category Standard Product Alternates

Require Approval Computer (Network File Server) Compaq/HP/Dell - n/a - Public Facing County websites Microsoft .NET/PHP/Joomla/Wordpress - n/a - Web App Development MS Visual Studio, Powerbuilder, PHP, Joomla, HTML5, CSS Departmental Discretion Mobile App Development Xcode, Jquery Mobile, Java, Telerik, HTML5 Sencha Development Version Control MS Visual Source Safe, CVS, SVN - n/a - Web Server Microsoft IIS, .NET Framework, L.A.M.P., Joomla -n/a- Database Server software MS SQL Server, Oracle MySQL Ad Hoc Inquiry Powersoft Infomaker, Crystal Repts, Business Objects Departmental Discretion Data Modeling Sybase PowerDesigner, ERWIN Departmental Discretion CASE Tools Sybase PowerDesigner Departmental Discretion GIS ESRI ArcGIS - n/a - Imaging/Storage Filenet P8 / EMC Centera Laser Fiche, CPDI Identity and Access Management Identity Manager - n/a - Thin Client Computing Citrix Metaframe, Citrix Presentation Server Departmental Discretion Messaging Microsoft Exchange Novell Groupwise Wireless Email Microsoft ActiveSync - n/a - Server Virtualization VMWare MS Hyper-V Collaboration System Microsoft Sharepoint Novell Teaming Track-It, Bindview, Footprints, Departmental IT Asset Management Service-Now Discretion Directory Services Microsoft Active Directory, Novell e-Directory - n/a - File/Print/Database Server OS Windows Server, SUSE Linux, Novell Open Enterprise Server, Red - n/a - Hat Enterprise Linux

Software Maintenance Agreements (if purchasing for the first time or over $5000) Hardware Maintenance Agreements (if purchasing for the first time or over $5000) NOTE: All cellular devices over $300 (including smartphones, iPads, tablets, with accessories) also require CEO Analyst approval.

Pre-Approved (if no services included) Office Suites Microsoft Office Departmental Discretion Operating System Windows 7 (32 bit, 64 bit) Windows VISTA, XP Project Management Microsoft Project Departmental Discretion Diagramming/Drawing Microsoft Visio Departmental Discretion Online Training Departmental Discretion - n/a - Backup ArcServe, HP Data Protector, vRanger Symantec Backup Exec, Departmental Discretion Software Distribution, OS Virus Novell Zenworks, MS AD & WSUS, Symantec Altiris Departmental Discretion Systems Management Dameware, Bindview BV-Control, MS Remote Departmental Discretion Terminal Services, VMWare vSphere Computer (Desktop PC, laptops) Compaq/HP/Dell/Compuwave/Lenovo Departmental Discretion Desktop Ergonomic Software RSI Guard Departmental Discretion Terminal Emulation Minisoft, Powerterm, Attachmate Extra, QWS3270 Departmental Discretion X Windows WRQ Reflection - n/a - Anti-Virus Symantec Anti-virus Corporate, Symantec EndPoint - n/a - Internet Browser Microsoft Internet Explorer, Firefox Chrome Power Management Verdiem Surveyor - n/a - Document Presentation Adobe Acrobat, eCopy PDF Pro Office Adobe Reader, Foxit Laptop and Netbook Encryption Check Point Point Sec, Full Disk Encryption, Symantec Encryption - n/a - FlexChoice Removable Media Encryption Symantec Encryption Encryption Removable Storage - n/a - Laptop/Mobile Theft Management Computrace Departmental Discretion Voice Recognition Dragon Naturally Speaking Departmental Discretion Data Subscriptions Departmental Discretion - n/a - Peripheral Equipment Scanners, printers, web cameras - n/a -

Revised 10/27/2014