3.4 Firewall Exceptions and Ruleset Procedure

Effective Date: October 27, 2025 Revised Date: July 28, 2026 

 1. Purpose 

 This document establishes a standardized procedure for the firewall exceptions and rulesets on the Arkansas State University - Jonesboro (A-State) campus. The goal is to create a clear and consistent procedure for all firewall requests. 

 

 2. Scope 

 These procedures apply to all Arkansas State University - Jonesboro faculty and staff firewall requests. 

 

 3. Definitions 

 

 Firewall – Network security device that monitors and controls incoming and outgoing traffic on the network based on predetermined rules. 

 Ruleset – A collection of rules that act as a security policy to filter network traffic. 

 Port – A communication endpoint that identifies a specific process or service on a device. 

 

 

 4. Firewall Exception Process 

 Firewall exceptions added to the A-State firewall must adhere to the following: 

 

 Firewall exceptions (open ports) must be requested in writing via a TDX work order using the Firewall Policy Change form. 

 Requests must be justified and approved by the Security Division and the Networking Division. 

 Requests must be reapproved annually. 

 ITS may scan devices that can be accessed via open ports for security issues. All issues found must be corrected/justified in five business days or the firewall exception will be closed. 

 ITS may close an open port at any time for security reasons. 

 ITS may, at its discretion, decline to open a port. 

 

 

 5. Standards Review 

 This document will be reviewed and reaffirmed annually, or upon significant changes to university IT governance, systems, or regulatory requirements. 

 Effective Date: October 27, 2025 Next Review Date: July 28, 2027 Version: 1.1