Firewall Exceptions and Ruleset Standard

Effective Date: October 27, 2025
Revised Date: October 27, 2025

1. Purpose

This document establishes a standardized procedure for the firewall exceptions and rulesets on the Arkansas State University - Jonesboro (A-State) campus. The goal is to create a clear and consistent procedure for all firewall requests.


2. Scope

These standards apply to all Arkansas State University - Jonesboro faculty and staff firewall requests.


3. Definitions

  • Firewall – Network security device that monitors and controls incoming and outgoing traffic on the network based on predetermined rules.
  • Ruleset – A collection of rules that act as a security policy to filter network traffic.
  • Port – A communication endpoint that identifies a specific process or service on a device.

4. Procedures

Firewall exceptions added to the A-State firewall must adhere to the following:

  • Firewall exceptions (open ports) must be requested in writing via a TDX work order using the Firewall Policy Change form.
  • Requests must be justified and approved by the Security Division and the Networking Division.
  • Requests must be reapproved annually.
  • ITS may scan devices that can be accessed via open ports for security issues. All issues found must be corrected/justified in five business days or the firewall exception will be closed.
  • ITS may close an open port at any time for security reasons.
  • ITS may, at its discretion, decline to open a port.

5. Standards Review

This document will be reviewed and reaffirmed annually, or upon significant changes to university IT governance, systems, or regulatory requirements.

Effective Date: October 27, 2025
Next Review Date: October 27, 2026
Version: 1.1