!

Enterprise Web Infrastructure (EWI)

Overview

The Enterprise Web Infrastructure consists of the hardware and software that is central to the University's presence on the Internet. This architecture offers a robust foundation for University Web sites. All University Web sites must be hosted on the Enterprise Web infrastructure. CSSD also provides support to departments in order to meet preliminary requirements that are necessary to properly and securely host sites within the EWI, including identifying security vulnerabilities that need to be remediated. There is optional hosting for Web databases (SQL server). The Enterprise Web Infrastructure is located in CSSD’s Network Operations Center, which manages the service 24 hours a day and provides exceptional bandwidth, redundancy, and security.

As part of the Enterprise Web Infrastructure, the University provides a Search Engine capability for sites that are in the University Domain. This search engine from Google analyzes traffic for one or more Web sites and provides easy-to-understand reports on visitors-where they come from, how they use a Web site, and more.

The University's centralized approach for Web hosting, which is required by the Enterprise Security Controls Guideline, ensures high availability and security of all official University Web sites. Known as the Enterprise Web Infrastructure (EWI), this infrastructure provides robust server hosting to departments, business units, individual faculty, research labs, and other University-affiliated groups. Personal Web site hosting is also available.

CSSD does not provide Web site design and development services. Contact University Marketing Communications (UMC) for more information.

Web Hosting + Content Management

Departments and faculty maintain control of all content hosted on EWI through a number of third-party content management systems or through Secure FTP.

Pitt SecureWeb

Departments at the University of Pittsburgh are required to submit Enterprise Web Infrastructure (EWI) web sites to Web vulnerability scans before these sites are accessible from the Internet. Web vulnerability scans thoroughly analyze Web applications from development through production for security vulnerabilities.

SecureWeb is a self-service application that offers users the ability to request ad-hoc scans at their convenience.

Scans are scheduled, deployed, and have results validated by Security Analysts at the Computing Services and Systems Development (CSSD). The results are then made available to you through the SecureWeb interface at http://secureweb.pitt.edu. Current procedure requires that you remediate any critical or high vulnerabilities for a site, then resubmit it for an additional scan before the site can go live.

Once a site has been deployed, it is placed in a routine schedule for scans. You will receive additional reports when routine scans discover new Critical or High vulnerabilities. Although, as a SecureWeb user you have the ability to initiate scans at any time.

As an authorized SecureWeb user, you can access a self-service interface through http://secureweb.pitt.edu to:

  • Create custom site settings for your Web site project.
  • Request Security Scans for your sites.
  • View, verify, and organize your scan results.
  • Request a rescan for any of your sites that require corrective actions.

Databases

Many Web sites provide dynamic content through databases. EWI supports centralized Microsoft SQL Server databases. EWI can also link to MySQL or other individual department databases that are protected behind enterprise network firewalls.

Web site Search and Traffic Analysis

Web sites hosted on EWI have access to the University's Google search tools. These tools allow you to create searches within your own site. They also enable results from your Web site to be displayed in the results of University-wide searches conducted from www.pitt.edu. Units may work with University Marketing Communications (UMC) to optimize their ranking in searches.

Web site traffic can be analyzed with Urchin software from Google, another tool provided by the EWI service. Urchin software from Google analyzes traffic for Web sites and provides easy-to-understand reports on your visitors that include information such as where they come from and how they use your site.

For More Information

To host a Web site on EWI, contact the Technology Help Desk at 412 624-HELP [4357] or submit a request online.