Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the It Operations topic
No spam. Unsubscribe anytime.
Director reports domain decommission and ongoing VOIP packet‑loss investigation
Summary
The city’s IT director said the Franklin NT domain was deactivated on July 5, 2026, reducing certain security risks, and reported an unresolved voice‑over‑IP packet‑loss problem that reduced reported reliability from 99.5% to about 80.4% since late May.
In a director’s report to the Franklin Technology Commission, Director Jim Matelski said the city formally deactivated its Franklin NT domain on July 5, 2026, and that the change reduced several previously identified network security vulnerabilities.
“Deactivating the former domain greatly diminished network security flaws,” Matelski said, adding that a few non‑Windows devices experienced DNS resolution problems during the cutover but that the IT team is completing the remaining cleanup.
Matelski also described an ongoing voice‑over‑IP packet‑loss problem that began on Memorial Day and has continued through months of multi‑vendor troubleshooting. He said vendors and carriers — including the phone provider RingCentral and ISPs WiscNET and Spectrum — show packet‑loss reports that drop reliability from about 99.5% before the incident to roughly 80.4% during the outage period.
“We’ve been working with firewall vendors, RingCentral, WiscNET and Spectrum and supplemental engineers,” Matelski said. “After two months of troubleshooting and finger pointing, the core problem still has not been fully determined.” He said packet loss appears to occur on Internet‑edge routers or upstream carriers rather than within the city’s internal network.
On security scanning, Matelski told commissioners that the Rapid7 deployment needs reconfiguration because the service account currently requires domain administrator privileges. Under recommendations from a recent penetration test, administrator and highly privileged accounts should be made members of the protected users group; Rapid7 will be redeployed with a different architecture and a dedicated service account that is not a domain administrator.
A commissioner asked who manages the Franklin library website after users reported a browser blocking issue; Matelski identified a library contact and said an expired certificate was discovered and he would notify the library contact to remediate it.
The commission discussed scheduling and other routine items and adjourned. No additional actions were taken on the VOIP or Rapid7 items at the meeting; staff will continue vendor troubleshooting and security reconfiguration work.
