Case Study: Protecting Princeton Computer Science Facilities Against Visible and Unseen Intrusion

Oct. 28, 2004
Network-peripheral hardware device provides comprehensive monitoring and management services to IT managers who are offsite or have equipment at remote locations.

More than ever before, IT managers need to secure equipment and facilities against a variety of intrusive conditions that could cripple critical operations, resulting in system malfunctions, loss of data or intellectual property, damage to mission critical hardware or even theft of valuable physical assets. Such conditions often include environmental events, failure of air conditioning systems, power outages, and untoward human actions.

The proliferation of increasingly strategic and sensitive networked equipment at remotely managed sites, including those where managers or supervisory personnel are occasionally offsite, has intensified the need to assure protection against such seen and unseen "intruders."

One of the solutions to covering this exposure is to provide comprehensive remote monitoring and protection using a network peripheral device that can provide the right combination of monitoring and management capabilities; a device that can integrate multiple existing inputs into an SNMP "trap" alarm system that delivers immediate notification via the network's native protocol.

The Princeton Challenge
Chartered in 1746, Princeton was the fourth college established in British colonial America. Last year the university enrolled 4,635 undergraduate and 1,997 graduate students at its 500-acre campus located in Princeton, New Jersey. The faculty of approximately 1,000 includes recipients of the Nobel Prize in physics, literature, economic sciences, and medicine. All faculty members are expected to teach as well as engage in scholarly research.

Like other universities and research centers, Princeton has a need to protect the intellectual property of the university, students and faculty. This includes securing facilities that house expensive equipment and sensitive data.

"Normally, the support staff members are offsite during nights and weekends," says Chris Tengi, Systems and Network Administrator at Princeton University's Department of Computer Science. "But we are always concerned about power supply, humidity, ambient temperature and related equipment that supports our facilities. If we have some sort of mishap that knocks out air conditioning in the middle of the night, we need to know about it."

The facilities that Tengi supports include the department's main computer room and labs that house workstations, PCs and other resources for Princeton's undergraduate and graduate students in Computer Science, as well as research including advanced projects in areas such as alternative models of computation, computational biology and bioinformatics.

"The threats we encounter are mostly heat and humidity," Tengi says, "although we are certainly concerned about unauthorized entry or human actions that can compromise our systems."

In fact, one of the department's major investments in monitoring and protection equipment was in motion-activated Axis security cameras that are mounted facing outside entries of the Computer Science Building as well as the main computer room. But while the cameras addressed the need to detect and monitor human activity after hours, an integrated solution to monitoring and managing heat- and humidity-related situations was still needed.

Concerned about the prospects of system problems due to human or environmental impediments, Tengi investigated the SNMP-Link Model SL61 Remote Site Manager made by Omnitronix.

Based in Seattle, Washington, Omnitronix has specialized in data collection devices for the telecommunications industry since 1988. The company's site-management product line grew out of an extensive experience in PBX alarm management and remote equipment access, especially for SNMP systems. These devices typically monitor critical business equipment - such as phone systems, power supplies or communications/ networking components - as well as the physical conditions that impact the health of such equipment, and then provide the network interface and intelligence required to get these non-networked devices into the control of the network.

With the SL61, in particular, as many as 16 different EventSensors that monitor temperature, humidity, airflow and noise, for example, can be daisy-chained for connection to Ethernet, phone line, Internet or wireless systems.

The Integration Process
Satisfied that the SL61 would meet his needs, Tengi acquired three of these self-contained units for three separate Computer Science rooms and connected sensors that monitor heat, humidity and door activity to each unit.

"We used the event sensors to send SNMP traps so that if they detected high humidity or temperatures that are too high or too low, the corresponding trap will generate an e-mail message to our pagers," Tengi explains. "You can buy and configure these with different combinations of capabilities. So, if I only needed a temperature sensor in one place and I didn't need to detect contact closure or humidity conditions, I can do just that. Being able to mix or match the sensors is convenient and saves on costs."

Tengi also installed an Omnitronix SL10, a low-cost SNMP-Link with -48 VDC operating voltage, to monitor the environment in an additional lab.

Improved monitoring Enables Prevention
Tengi says that accidental environmental problems resulting from human intervention are now handled reliably by the event sensor system. For example, since some of the computer lab facilities were previously standard office spaces, the air conditioning thermostats are accessible by occupants.

"If they feel the room is too cool, they raise the thermostat, but if they leave the room that way, it will get too hot for the equipment," Tengi points out. "But now the sensors will detect the temperature rise at whatever threshold we have set and we can make corrections before the equipment is affected."

In another instance, sensors detected when a maintenance crew entered the computer room out of hours to "borrow" a power outlet, disconnecting some equipment in the process.

"The system notified me on my pager, so we were able to take care of the problem before any damage occurred," says Tengi. "We then reviewed the images generated by the motion-detector-activated cameras, and we could see that the cleaning crew had unplugged our equipment by mistake."

Looking Forward
Although Tengi has not yet used the available "airflow" event sensor, he believes it offers interesting monitoring capabilities.

"The ability to measure airflow would enable you to monitor fan activity, independent of temperature," notes Tengi. "If you had fans that were always supposed to be running, and the airflow went down to zero, that could trigger an alarm."

Tengi is also considering the purchase of an additional SL10 for the computer facility's UPS room. He also sees the advantage of integrating other devices, such as the surveillance cameras, with environmental event sensing capabilities.

"We purchased the motion detectors for the cameras before we installed the SL61s," continues Tengi. "But you can wire the cameras and configure them in such a way that when a contact closure on a door trips the SL61, it could trigger a camera to take pictures."

Flexibility that Adds Value
"We didn't take advantage of all the features," Tengi says, "but if we need other capabilities in the future we can simply order event sensors accordingly. For our application, getting the SNMP query capability without having to buy an SL61 for every location - and the flexibility of being able to put sensors in different configurations depending on what you need - all adds to the value of the basic device."