Resolution 2025-084 - Laserfiche WebLink

Home Browse Search

Special Terms and Conditions (1) Ensuring mitigations applied to the system don't allow end-user modlfication. (2) Not allowing the use of dial-up connections. (3) Using industry standard protocols and solutions for remote access, Examples would include RADIUS and Citrix. (4) Encrypting all remote access traffic from the external workstation to Trusted Network or to a component within the Trusted Network. The traffic must be encrypted at all times while traversing any network, including the lnternet, which is not a Trusted Network. (5) Ensuring that the remote access system prompts for re-authentication or performs automated session termination after no more than 30 minutes of inactivity. (6) Ensuring use of Multi-factor Authentication to connect from the external end point to the internal end point. Passwords or PIN codes may meel a lesser standard if used in conjunction with another authentication mechanism, such as a biornetric (fingerprint, face recognition, iris scan) ortoken (software, hardware, smartcard, etc.) in that case: (1) The PIN or password must be at least 5 letters or numbers when used in conjunction with at least one other authentication factor (2) Must not be comprised of all the same letter or number (11111,22222, aaaaa, would not be acceptable) (3) Must not contain a "run" of three or more consecutive numbers (12398, 58743 would not be acceptable) lf the contract specifically allows for the storage of Confidential lnformation on a Mobile Device, passcodes used on the device must: (1) Be a minimum of six alphanumeric characters. (2) Contain at least three unique character classes (upper case, lower case, letter, number). (3) Not contain more than a three consecutive character run. Passcodes consisting of '12345, or abcd12 would not be acceptable. k. Render the devlce unusable after a maximum of 10 failed logon attempts. 5.Protection of Data. The Contractor agrees to store Data on one or more of the following media and protect the Data as described: a Hard disk drives, For Data stored on local workstation hard disks, access to the Data will be restricled to Authorized User(s) by requiring logon to the local workstation using a Unique User ID and Hardened Password or other authentication mechanisms which provide equal or greater security, such as biometrics or smart cards. b. Network server disks. For Data stored on hard disks mounted on nelwork servers and made available through shared folders, access to the Data will be restricted to Authorized Users through the use of access control lists which will grant access only after the Authorized User has authenticated to the network using a Unique User lD and Hardened Password or other DSHS Central Contract Services 6C17CF County Program Agreemenl (10-31-2017) Page 12 t.