• NETWORK GROUP
• SERVER GROUP
• ISSS GROUP
• SUPPORT GROUP
• DATABASE GROUP
• APPLICATION GROUP
• SECURITY GROUP

NETWORK GROUP

What protocols are used?
UDP, TCP/IP and standard encapsulations. Depending on configuration, external addresses might be: http://www.freshloc.net/
Freshloc.net:6120 – most typically
69.15.123.134:80 is where readers initially try to send their packets

How much bandwidth is required per client?
A very nominal amount, even in the busiest of systems. The average maximum is 10bps for each sensor. However, at 1000 sensors max is 10Kbits/sec, typical using our default compression is 1K bits/sec. 

If there are multiple servers, what is the bandwidth between servers? 
Bandwidth between servers is nominal for typical processor-to-processor (LAN) application.  At the enterprise server, assuming a single server, this is not applicable.  If we write to your SQL server, the bandwidth is approximately 10x the bit rate (full point records).  The SQL transaction bandwidth at absolute maximum would be one record per minute.  Each record is 100 bytes.  Our SQL server(s) support over 1000 records per second. 

Does this product have wireless capability?  If so, is it compliant with Cisco WPA, TKIP and LEAP security? 
We expect you will be using a wired 10/100 Ethernet Reader.  If you choose the WIFI equivalent version for one or more Readers, then the following is supported by the WIFI version:

• WEP (Wired Equivalent Privacy) -64/128-bit encryption (RC4)  
• WPA/WPA2/802.11i  
• 128-bit TKIP/CCMP encryption  
• 802.1x EAP authentication  
• LEAP (WEP only), PEAP, TTLS, TLS  
• GTC, MD5, OTP, PAP, CHAP, MSCHAP, MSCHAPv2, TTLS-MSCHAPv2  

Enterprise and Pre-Shared Key (PSK) mode  
Yes

Can this product be accessed through a modem? 
No, there is no analog phone line support. 

Are any modem lines required?  If so, how are the utilized? 
No

Is a VPN connection required? 
Yes, FreshLoc needs a secure access for critical support issues. 

If so, are you capable of supporting a site to site VPN connection (IP tunnel using the ISAKMP / IPSEC protocol suites)? 
Yes, currently.  The customer needs to furnish tunneling information. 

Back to Top

---

SERVER GROUP

Describe FreshLoc's Servers:

• We are a 24/7 NOC with distributed sites coming on line.
  
• Servers are secured by a Cisco Firewall and all ports are completely blocked for only critical ports.  
  
• Servers update security patches automatically, with operator supervision daily.
  
• Extensive custom software suite and web pages operates on the latest or next to most current Windows Server Operating Systems, Microsoft Internet Information Systems and Microsoft SQL platforms.  
  
• All software is designed or tested on Explorer 6, 7 and 8.  
  
• All other non-Explorer browsers provide substantial functionality but are not technically supported.  
  
• All servers are contained in temperature and humidity secured controller racks.  
  
• Servers and raid array have dual supplies.
  
• Processors are multi-core and/or multiprocessor Dell and or IBM.     
  
• Customer data is maintained online in solid state memory in RAID arrays.  
  
• Loss of up to two diskless drives neither compromise data nor its immediate availability.
  
• The software suite consists of watchdogs and dashboards which monitor all processes within the NOC(s).  
  
• Backups are made 6 times per day with Symantec Veritas software.
  
• Memory capacity exceeds 12 Terabyte (12,000,000,000,000 bytes).  
  
• Diskless disk drives are hot swappable with automatic failover to spares.  
  
• VPN tunnels are Cisco based hardware VPNs.
  

What is the recommended number of servers required for this deployment?
We recommend two servers: one running SQL and some attendant programs (if SQL is not already available), and another server running the balance of the programs. 

If there are multiple servers, can some of the services be consolidated? What are the benefits/ramifications?
Yes.  We run for scalability so we spread our applications and our servers’ monitoring over ten thousand points of real time; operating approximately under 20% loads. 

What server OS is required (for each server)?
Windows 2003 Standard.

What are the server(s) hardware specifications?
IBM XSeries, dual cores are fine.  We recommend dual processors because we suspect that Microsoft products compete with our applications and that multiprocessors tend to provide more balance to our 32 bit applications. 

Are any specialized devices or add-in cards necessary at the server level? 
Not in a system under 1000 sensors. 

Are there any known compatibility issues with any specific MS service packs? 
None since Windows 2003, that we know of.  As we have found issues, we have updated the programs.  For example, in 2004, there was a compatibility issue with the way we were sending and receiving mail for our alerting software—that fix is now incorporated. 

What Disaster Recovery model is recommended (clustering, standby server, data replication, etc)? 
There are several models that we could employ, depending on the resources you have in place. 

Is clustering a requirement in the deployment of this application?
Clustering is required only for recovery and failover models, not as a matter of operation.

What is the recommendation for the creation of a test environment? 
The recommendation is to perform operations over VPN tunnel for the application.  A migration path then ensues to take over enterprise services. The method used to transport data or system will depend upon further understanding of your IT resources. 

What is the average resource utilization for each server (CPU, Memory, Network, I/O) and for X users? 
While data movement is significant with the many processes involved in alerting and reporting, resource utilization is scant under the load of 1000 sensors and multiprocessors with 4G of memory.  All servers are setup in a virtualized environment if they qualify. 

Are there any known compatibility issues with VMware ESX Server 2.5.x?
Little we do precludes compatibility at most any level; however we do not seek any standards for our server software.

Are there any ancillary services required (IIS, SMTP, FTP, etc)? 
Yes, IIS, POP3/SMTP access is required for outgoing mail, a server account is required to collect auto confirms and replies to alerts, FTP is needed for support convenience, IIS is needed to serve up the ASP pages.  If user interaction intensifies, you may want to start the NLB load balance services and run multiple IIS servers, which we support. 

If IIS, can this be co-hosted on an existing Windows 2003 server with IIS 6? 
Yes. 

Are there any issues with our operating on company equipment?
We would like detail from you on any restrictions for our comfort and confidence in the enterprise server. 

Are there any other licensing requirements for the server(s) other than the operating system?
None but FreshLoc’s.

Do you use open architecture? 
We protect our source code and our data formats.  This enables us to change our applications without testing other software. 

Does this application require file sharing?
File sharing is preferred, but for multiple IIS servers, there must be DTFS or common access to the same graphing rendering directory.

Does this application require printing directly from the server? (printers installed on the server) If so, what is the estimated printing load? 
No. All pages are served to the browser or emailed.

If we require all applications to run as a service, does the application run as a service?
Only the aggregation program Tassure runs as a service or not. Our server applications are hardened, but create a lot of information which is best seen by our consistent, informative and colorful instrument panels for each application.  

What is the initial disk space requirement for the application?
We feel that a mirrored Raid 300G would suffice with raw data space of 150G. Half of this is database and half is for the inbound traffic logs. They can be thrown out but we try to keep ours as long as possible. 

What is the expected data growth rate for the application? 
Very conservatively (guessing high) and uncompressed - 30G per year. 

Do you need remote access to the server?
For any efficiency of support, yes. 

If so what type of connection do you need (e.g. modem, ISDN, VPN, etc.)? 
VPN.  We have electronic keys provided to us by customers and login information to get to servers and such.  Some customers permit local login access only. 

Can you support us with PCAnywhere for remote access or is there a need to use other applications?
We prefer VPN with RDP but might have licenses to PCAnywhere. 

Are there any specific file types or directories that must be excluded from antivirus scanning to make the application functional or perform optimally? 
No

Are there any known compatibility issues with any backup software (Arcserver, Veritas, Commvault, etc)? 
The newest version of Veritas is competent and proven. 

Are there any special routines involved in the backup of the application or database (IE can we backup while it is live)? 
No. 

What is the upgrade path and cycle for this application, if any? 
Executables and changes to verbs in the .cfg files per program.  SQL scripts occasionally are required prior to using executables and have never required shutdowns to our knowledge. 

Can McAffee VirusScan 7.1 run on your or are there any virus scan exclusions required for this application deployment? 
We expect no problems with standard industry applications. We use Microsoft’s LiveOneCare and a very buttoned-down firewall. 

Back to Top

---

ISSS GROUP

What are the minimum workstation requirements?  
Explorer 6.0 or better.  If nurses want to monitor their local area’s sensors and receive popups on their workstation, an activeX control is required. 

What are the recommended workstation requirements?
N/A

Are there special printer/printing requirements?
Reports use color legends so printing in color is more informative. 
 
What Client side OS is required?
None.

What Client side software will be needed (assume the workstation has nothing on it)?
None. 

What are the licensing requirements for each client (include any MS licenses needed)?
None. 

Can you provide electronic installation instructions?
There is a website user’s guide.

Is there a drive mapping(s) required?
No. 

Can the workstation use a DNS name to reference the server or devices?
N/A

Can the workstation use a UNC name to reference the server or devices? 
N/A

Can client stations use DHCP to include any data collection devices?
N/A

Are any special procedures required to transfer your application from an existing system to a new system (in a technology refresh situation)? 
N/A

Back to Top

---

SUPPORT GROUP

What is your commitment to support the application? 
There are many facets of the application however our services are unparalleled across our known competition, if any. 

What is your expectation for local support from our site? 
Ease of access when we are supporting you or one of your internal customers. 

What kind of IS staff training is provided?
Presentation and seminar. 

What kind of system manager training is provided?
Direct support as needed. 

What kind of end user training is provided? 
Presentation and seminar upon introduction. 

Are electronic manuals provided?
Yes in Acrobat pdf format. 

Back to Top

---

DATABASE GROUP

What is the database back end? 
MSSQL

If there is a database backend, what version is required?  What service packs are acceptable or required? 
2005 – most current.  Application and use of Sql is fairly standard.  We use stored procedures and no triggers.

What type of database license is recommended (i.e.:  MS-SQL Enterprise, per processor)? 
It is feeding a IIS server, so you must license by processor.  Dual cores require only single licenses. 

What is the backup recommendation for the database?
Veritas realtime to disk.  Unspool disk as required by internal disaster recovery policies. 

Will database support be expected of the IT department once the application is in place?  Or, will there be shared support between the vendor and the database team?  Or, will support be handled strictly by the vendor? 
We can discuss this.  We do not anticipate providing DBA service to enterprise customers.  If this will be required, we need to know in advance. 

Back to Top

---

APPLICATION GROUP

Will this application interface with any other hospital systems (e.g. Sunquest, Peoplesoft, etc.)?  If so what type of interface do you use?
At present, we do not believe our application interfaces with hospital systems. 

What protocol is used for interface(s)? 
Mostly HTML to the user’s browser. 

Do/can the interface processes and the database reside on the same server?
The way we define interface processes and database, yes.  

Will this application interface with a Central Data Repository? Clinical? Financial?  
No financial and no patient data at this time.  The application is strictly measurement information of machinery.

Is there patient billing, charging, registration, or scheduling involved?
None at this time. 

How does the application handle multiple sites or multiple databases on the same server? 
Handily.  Each has specific reasons but multiple sites “in your intranet” can be aggregated into one single server.  Readers can be simply added to a hub port and the traffic is directed to the intranet receiving programs or sent to the internet similarly. 

How does the application handle multiple encounters or admissions on the same patient?
N/A

If this system is a replacement, will this be a clean start or will a data conversion be required? 
Clean start.

How is the database maintained (i.e. describe processes for purging/packing/archiving)?
The metrology tables take up 90% of the database; they and are created daily and named by the day of the year.  The database is very easily maintained, pruned or archived this way.

Does this application comply with JCAHO, State Board, TDH, and other regulatory requirements? 
We are committed to compliance with these disparate groups.  

How often are updates provided?
This depends on support level.  We have daily releases. 

Can updates be pushed down from the server to each workstation?
N/a, we are browser based. 

Does the system support an authentication method other than passwords? If so, what method(s)?
No. 

Does the system support a hierarchy of access levels?  If so, are these defined by the system or can they be modified to support our hospital’s needs?
Yes, from read only to complete dominion over the administration data. 

Back to Top

---

SECURITY GROUP

What are the minimum and maximum password lengths permitted?
12/12

Can users re-use the same password?
Yes.

Can users be limited to accessing only their patients?
No patient data.

Does the application maintain an audit trail of when passwords were created/changed and by whom? 
Yes. 

Does (or can) the application maintain an audit trail of user activity? 
Yes. 

Does the application allow the user to change his/her own password? 
Not at present. 

Does (or can) the application force a user to change his/her password during the first on-line session? 
Not at present. 

Are stored passwords encrypted? 
Yes.

Are stored passwords only accessible from the password system?
Yes. 

Does or can the system log users out for inactivity? 
No.  The browser refreshes its page by the Freshloc html/java code every 10 minutes.  Often times users will leave their browser open to the real time report they are currently watching or interested in. 

Can your application authenticate through an LDAP server?
No. 

Does the system provide limits on the number of invalid access attempts allowed?  If so, is the user locked out of the system indefinitely or for a specified timeframe?
Not at present. 

Can the vendor be restricted from accessing the application’s data?
Yes.