# 3.4 Firewall Exceptions and Ruleset Procedure

**Effective Date: October 27, 2025**  
**Revised Date: July 28, 2026**

#### 1. Purpose

This document establishes a standardized procedure for the firewall exceptions and rulesets on the Arkansas State University - Jonesboro (A-State) campus. The goal is to create a clear and consistent procedure for all firewall requests.

---

#### 2. Scope

These procedures apply to all Arkansas State University - Jonesboro faculty and staff firewall requests.

---

#### 3. Definitions

- **Firewall** – Network security device that monitors and controls incoming and outgoing traffic on the network based on predetermined rules.
- **Ruleset** – A collection of rules that act as a security policy to filter network traffic.
- **Port** – A communication endpoint that identifies a specific process or service on a device.

---

#### 4. Firewall Exception Process

Firewall exceptions added to the A-State firewall must adhere to the following:

- Firewall exceptions (open ports) must be requested in writing via a TDX work order using the [Firewall Policy Change](https://services.asusystem.edu/TDClient/35/astate/Requests/ServiceDet?ID=342) form.
- Requests must be justified and approved by the Security Division and the Networking Division.
- Requests must be reapproved annually.
- ITS may scan devices that can be accessed via open ports for security issues. All issues found must be corrected/justified in five business days or the firewall exception will be closed.
- ITS may close an open port at any time for security reasons.
- ITS may, at its discretion, decline to open a port.

---

#### 5. Standards Review

This document will be reviewed and reaffirmed annually, or upon significant changes to university IT governance, systems, or regulatory requirements.

**Effective Date:** October 27, 2025  
**Next Review Date:** July 28, 2027  
**Version:** 1.1