Transcript Document

COLUMBIA SCHOOL
DISTRICT
WEB FILTERING
June 2007
We decided to enter into a 3 year contract
with Secure Computing (N2H2) for Web
filtering services because I did not
believe that AT&T was going to have
what we needed in time for school to
start (Aug 2007)
The 3 year was a 3 for 2 deal. (Cost
about $3.00 per computer per year)
What CSD Demanded
• Ability to filter by groups (teachers, students,
office and administrators)
• Ability to whitelist sites quickly.
• Ability to allow users to easily request site
reviews.
• Ability to design a system that was difficult to
beat. (Integration of filter with other security
components)
Components of the Filtering System
• Management Server
• Filtering Server
• Reporting Server
(Can be all in one)
Platforms for the Management &
Reporting System
–
–
–
–
–
–
–
–
–
–
Windows 2000 SP4
Windows 2003 SP2
Windows 2003 SP1
Windows XP Pro SP2
Windows Vista
Red Hat ES 3.0 Update 6
Red Hat ES 4.0 Update 2
Red Hat ES 5.0
Red Hat ES 5.1
Solaris 8/9/10
Filter Server Platforms (IFP or Proxy)
Check Point FireWall-1
Check Point FireWall-1 NGX R65 for Windows 2003
Server SP2
Cisco ASA – Adaptive Security Appliance (via IFP)
Cisco Content Engine (via IFP)
Cisco IOS Firewall (via IFP)
Cisco PIX Firewall (via IFP)
Cisco PIX v6.2 and later
Microsoft ISA Server 2006
Microsoft ISA Server 2004
Microsoft ISA Server 2004
Microsoft ISA Server 2000
MS ISA Server 2000 SP2 for Windows 2003 SP2
MS ISA Server 2000 SP2 for Windows 2000 SP4
Nortel (via IFP)
Nortel ACC v3.0 or later
Nortel ASF
SonicWALL (via IFP)
SonicWALL v6.3 or later
Squid Proxy Server
Stratacache (via IFP)
Sun Java System Web Proxy Server
Sun Java System Web Proxy Server 4.0.6 for Solaris 8, 9,
and 10 Sun Java System Web Proxy Server 4.0.4 for
Solaris 8, 9
3Com SuperStack
Blue Coat Proxy SG
Blue Coat (Network Appliance) NetCache
Cisco Content Engine and Content Engine Network
Module (supported for SmartFilter 4.1.1 and earlier
versions)
Computer Associates eTrust Intrusion Detection
Computer Associates eTrust Secure Content Manager
eSoft InstaGate
Hewlett Packard TRU64
McAfee Secure Content Management Appliances
NetIQ WebMarshal
Netopia Parental Controls
Novell BorderManager
Secure Computing Sidewinder® G2 Firewall™
Secure Computing Sidewinder G2 Security Appliance
COLUMBIA SCHOOL DISTRICT
RedHat 5.1 Proxy Server
(At each school)
Windows 2003 Management/Reporting
(Central Office)
1.
2.
3.
4.
5.
6.
7.
8.
PROS
I am not at the mercy of AT&T
New filter sites updated every night
Update deployment is simple
Comprehensive Reporting
Ability to filter by, IP Address group or by
Active Directory groups.
Proxy server method reduces network
traffic.
Easy for users to request reviews.
Tech Support is OUTSTANDING!!!
CONS
Not a piece of cake to install the Linux server
applications. Recompiles Squid.
Configuration of the manager was not very
intuitive for me. Instructions were not very
helpful. Presumed that the installer would
understand the terms that were not used in
the conventional sense.
MANAGEMENT CONSOLE
Management Console
Management Console
Management Console
Management Console
Management Console
93 Categories
Report Generator
Report Generator
Report Generator
Report Generator
Report Generator
Report Generator