Listen to this Post
Introduction:
In high-stakes environments like a military hospital, the implementation of a robust IT Service Management (ITSM) system is not merely about organization—it is a critical component of cybersecurity and operational continuity. The recent deployment of a ticketing system at Military Hospital 103 in Hanoi highlights the convergence of structured IT support with cyber hygiene. By utilizing GLPI (Gestionnaire Libre de Parc Informatique), an open-source ITSM tool, the project established a controlled interface for service requests, ensuring that IT support teams can track, manage, and resolve incidents without exposing sensitive healthcare infrastructure to unregulated access.
Learning Objectives:
- Understand the architecture and security benefits of deploying an open-source ticketing system like GLPI in a secure environment.
- Learn how to configure web-based ticketing interfaces with hardened security controls (HTTPS, ACLs, and database encryption).
- Acquire the skills to automate IT support workflows using scripts and integrate cybersecurity best practices into service desk operations.
You Should Know:
- Deploying GLPI with Security Hardening (Linux & Windows)
Step‑by‑step guide explaining what this does and how to use it.
Deploying GLPI requires securing the underlying LAMP (Linux, Apache, MySQL, PHP) or WAMP stack to prevent vulnerabilities. The goal is to create an isolated environment where ticketing data—often containing sensitive user information—is encrypted and access is strictly controlled.
For Linux (Ubuntu/Debian):
sudo apt update && sudo apt upgrade -y sudo apt install apache2 mysql-server php php-mysql php-ldap php-xml php-mbstring php-gd php-curl -y wget https://github.com/glpi-project/glpi/releases/download/10.0.12/glpi-10.0.12.tgz sudo tar -xzf glpi-10.0.12.tgz -C /var/www/html/ sudo chown -R www-data:www-data /var/www/html/glpi/ sudo chmod -R 755 /var/www/html/glpi/
For Windows (using IIS and MySQL):
- Install MySQL Community Server and IIS with PHP Manager.
- Extract GLPI to
C:\inetpub\wwwroot\glpi. - Configure IIS to use a dedicated application pool with `ApplicationPoolIdentity` to restrict file system access.
Critical security commands: Enable HTTPS with Let’s Encrypt:
sudo apt install certbot python3-certbot-apache sudo certbot --apache -d tickets.hospital103.local
After installation, navigate to `http://your-server/glpi/install/install.php` to complete the web setup. Immediately remove the `install` directory after configuration:
sudo rm -rf /var/www/html/glpi/install/
2. Configuring the Web-Based Interface for Multi-Device Access
Step‑by‑step guide explaining what this does and how to use it.
The post emphasizes a “web-based interface optimized for seamless access across multiple devices.” This requires configuring responsive design and API access. GLPI supports REST API, which is essential for mobile clients and automation.
To enable API access for secure integration:
- Log in as administrator.
- Navigate to `Setup > General > API` and enable the API.
- Generate an API token for specific users to ensure that only authenticated devices can submit tickets.
To force HTTPS redirection and secure cookies, edit the Apache configuration:
<VirtualHost :80> ServerName tickets.hospital103.local Redirect permanent / https://tickets.hospital103.local/ </VirtualHost>
Implement rate limiting using `mod_evasive` to prevent brute-force attacks on the login portal:
sudo apt install libapache2-mod-evasive sudo mkdir /var/log/mod_evasive sudo chown www-data:www-data /var/log/mod_evasive
Add to Apache config:
DOSHashTableSize 3097 DOSPageCount 2 DOSSiteCount 50 DOSLogDir "/var/log/mod_evasive"
- Establishing a Responsive IT Support Team with Automation
Step‑by‑step guide explaining what this does and how to use it.
A responsive team requires automation to assign tickets based on category and urgency. Using GLPI’s built-in rules engine, you can automate assignment to specific IT support groups (e.g., hardware, software, network).
To configure automated assignment:
- Go to
Administration > Rules > Assignment Rules. - Create a new rule: “If Category = Network Failure, assign to Group ‘Network Team’.”
For advanced automation, use GLPI’s command-line interface (CLI) to generate reports or auto-escalate tickets. For example, to list all high-priority tickets older than 24 hours:
php /var/www/html/glpi/front/ticket.php --list --criteria='priority=5' --criteria='status=notclosed'
Integrate with Slack or Mattermost for instant alerts on high-priority tickets:
curl -X POST -H 'Content-type: application/json' --data '{"text":"Critical ticket 1234 opened!"}' https://hooks.slack.com/services/YOUR/WEBHOOK
This ensures the IT support team is immediately responsive, reducing downtime in critical hospital environments.
4. End-User Training and Security Awareness Integration
Step‑by‑step guide explaining what this does and how to use it.
Training end users is crucial to prevent social engineering attacks. The ticketing system can be used to simulate phishing attacks or security awareness campaigns. GLPI can manage “Surveys” or “Knowledge Base” articles that educate users on secure ticket creation.
To create a mandatory security acknowledgment before ticket submission:
– Install the “Formcreator” plugin.
– Create a form with a checkbox: “I confirm I am not submitting sensitive patient data in plain text.”
– Set the form to redirect to the knowledge base if the user checks a box indicating unfamiliarity with security procedures.
On Windows, you can push a desktop shortcut that uses Group Policy to enforce the use of the ticketing system, preventing users from submitting requests via unsecured email:
PowerShell script to create a shortcut to the secure ticketing portal
$WScriptShell = New-Object -ComObject WScript.Shell
$Shortcut = $WScriptShell.CreateShortcut("C:\Users\Public\Desktop\Hospital Ticketing.lnk")
$Shortcut.TargetPath = "https://tickets.hospital103.local"
$Shortcut.Save()
- Advanced Cybersecurity: API Security and Hardening the Database
Step‑by‑step guide explaining what this does and how to use it.
In a military hospital setting, the database containing ticket history is a high-value target. SQL injection and unauthorized API access are primary threats.
To secure the MySQL database:
Run mysql_secure_installation sudo mysql_secure_installation Create a dedicated user with minimal privileges CREATE USER 'glpi_user'@'localhost' IDENTIFIED BY 'StrongP@ssw0rd'; GRANT SELECT, INSERT, UPDATE, DELETE ON glpi. TO 'glpi_user'@'localhost'; FLUSH PRIVILEGES;
For API security, implement API key rotation and IP whitelisting. In GLPI, under Setup > General > API, restrict API access to the IP ranges of the hospital’s internal network:
– Add `$CFG_GLPI[‘api_restricted_ip’] = [‘192.168.10.0/24’];` in inc/config.php.
To monitor for brute-force attempts on the API, use fail2ban:
sudo apt install fail2ban
Create a custom filter for GLPI:
[glpi-auth] enabled = true port = http,https filter = glpi-auth logpath = /var/log/apache2/access.log maxretry = 5
Add regex to `filter.d/glpi-auth.conf` to catch failed login attempts.
What Undercode Say:
Key Takeaway 1: The deployment of GLPI in a military hospital demonstrates that open-source tools, when properly hardened, can meet the rigorous security demands of healthcare and defense sectors.
Key Takeaway 2: Automation and API security are not optional; they are the backbone of a responsive IT support team that can simultaneously manage service requests and defend against cyber threats.
+ Analysis: The project highlights a shift from reactive IT support to proactive, structured service management. By implementing role-based access controls, HTTPS enforcement, and automated alerting, the hospital ensures that digital transformation does not become a vulnerability. The training component is critical—users become the first line of defense, reducing the risk of data leakage through improper ticket descriptions. The integration of tools like fail2ban and API whitelisting bridges the gap between operational efficiency and cybersecurity compliance.
Prediction:
As healthcare IT systems become increasingly targeted by ransomware, the segmentation of IT support functions through platforms like GLPI will become standard. We predict a rise in AI-driven automation within these ticketing systems, where machine learning models will automatically classify and prioritize security incidents based on user behavior analytics. Additionally, the integration of military-grade encryption and zero-trust architectures will evolve from being optional enhancements to mandatory requirements for any facility handling sensitive health data. The success at Military Hospital 103 will serve as a blueprint for other institutions seeking to balance operational agility with impenetrable security postures.
▶️ Related Video (80% Match):
🎯Let’s Practice For Free:
IT/Security Reporter URL:
Reported By: Hoang Nguyen – Hackers Feeds
Extra Hub: Undercode MoN
Basic Verification: Pass ✅
