Briefing for Schools on Broadband and ISA Configuration

1
Briefing for Schools on Broadband and ISA
Configuration

• Tim Collings
• Bob Mahoney
• Alan Malloy

2
Objectives

• To give you an overview of the network that you
  are connected to and the central services that
  are operated together with current development
  activities and those that will be coming as a
  result of DFES and BCC objectives
• To explore options and hints for optimising the
  performance of your school Internet services
  particularly web access
• To give an opportunity for group discussion and
  feedback on current requirements issues etc.

3
The BCC WAN
4
(No Transcript)
5
(No Transcript)
6
(No Transcript)
7
(No Transcript)
8
(No Transcript)
9
Protex Filters

• Filtering can be subjective
• You can customise your internet access
• Deny Access to Sites
• Allow Direct unfiltered access to sites

10
Using ISA to customise your Internet access

• Configure ISA to apply special rules to specific
  sites
• Simple Two Part process
• 1 Create a Destination Set
• 2 Set up Routing

11
Deny Access Rule

• STEP 1
• Create a Destination set go to (Policy
  Elements gt Destination sets)
• Enter the sites you want to block eg .itv.co.uk

12
(No Transcript)
13
(No Transcript)
14
(No Transcript)
15
(No Transcript)
16
Deny Access Rule

• STEP 2
• Create a Routing Rule Go to (Network
  Configuration gt Routing)
• Selected Destination Set Deny Access
• Action Redirect to a Hosted Site eg
  www.bbc.co.uk

17
(No Transcript)
18
Deny Access Rule
19
Deny Access Rule
20
Deny Access Rule
21
Go Direct

• STEP 1
• Create a Destination set go to (Policy
  Elements gt Destination sets)
• Enter the sites you want to block eg .itv.co.uk

22
(No Transcript)
23
Go Direct
24
Go Direct
25
Go Direct
26
Go Direct

• STEP 2
• Create a Routing Rule Go to (Network
  Configuration gt Routing)
• Selected Destination Set Deny Access
• Action Redirect to a Hosted Site eg
  www.bbc.co.uk

27
Go Direct
28
Go Direct
29
Go Direct
30
Go Direct
31
Routing

• Default Gateway v Static Routes
• Your Decision

32
Default Gateway(the IP address of your Router)

• Allows direct access to the internet without
  going through either the County or Protex filters
• Lets you chose those sites you trust and go
  directly to them without any filtering
• Less Secure opens your network to possible
  virus attacks from other schools on the E2BN
  network

33
Static Routes

• Restricts your schools external connections to
  County Hall proxies
• Allows access to all 4 Protex filters
• 10.51.48.4 10.15.48.7
• Reduces risk of attacks from other networks on
  the E2BN WAN
• Prevents Direct Access to web sites

34
What about wireless security?

• If I went onto your school grounds with a
  wireless laptop, what could I gain access to
  without any passwords?
• School Internet gateway and BCC network?
• school servers?
• school network?