CLOUD AND INTERNET ACCESS METHODS - 4985.3

As part of the Internet Access Policy, agencies/state entities shall use the following cloud and internet access methods:

1. Internet Access:

   Agencies/state entities shall use CDT managed Internet access services to connect to the Internet. Agencies/state entities are not permitted to use other Internet Service Providers (ISP) to connect directly to the Internet.

2.  CDT provides two secure methods of accessing the Internet:

1. Four CDT managed Internet connections, using three different Internet Service Providers (ISP), geographically dispersed within and outside the State, that are accessed using CGEN.

    

2. The CDT SD-WAN Service, required for the use of Internet circuits used as a cost-effective solution for branch offices tunneling traffic via the CDT Cloud Exchange to access Internet applications/services.

1. CDT may allow the direct offloading through a CDT SD-WAN edge device to Internet-based services if the services are within the list approved and maintained by the Office of Information Security (OIS). The approved list contains specific Internet destinations where the session is initiated within a branch office and the destination application/service has been determined to be trusted. The approved list is in the SD-WAN Service Catalog at cdt.ca.gov

    

2. Use the CDT provided Cloud Provider Interconnect (CPI) or equivalent CDT services to obtain a direct path to the Internet or cloud services. Entities are not permitted to use other providers to connect directly to Cloud Service Providers (CSP), except as defined in State Administrative Manual (SAM) Section 4985.2 (c).

    

3.  Traffic must be inspected by CDT or CDT approved cloud inspection point.

• Agencies/state entities who have a compelling business need to use an alternative solution may submit an exemption request to CDT for approval. The exemption must be approved by CDT prior to purchasing non-CDT Internet Access Services. The Internet Access Policy exemption process is defined on the CGEN Exemption Request webpage at cdt.ca.gov.