Thoughts on our network Duane Guilbeau Network Supervisor

Topics to Cover Security Home vs. Enterprise Wireless

Security, Why bother? We have personal info on 14,000 students No credit history, no debt, no loan defaults We are a target Network dependency Testing, grade reporting, food services, purchasing, cameras, clocks, door locks, air conditioning, www No dedicated security team Not proactively monitoring traffic flows Security is everyone’s problem Physical and electronic

Security - Passwords Your username/ password identify YOU Don’t share passwords No weak passwords “Password”, nothing, names Don’t let students share passwords No acceptable use form = no internet Generic Accounts How to change your password Control - Alt - Delete

Security - Email Phishing - preying on trust / inattention FedEx, UPS, IRS, PayPal Don’t click the links Ransom ware, back doors We’ve been affected: maintenance, sped server

Home vs. Enterprise Networks Our network is not an extension of your home Go to your bank, see if you can use their Wi-Fi. Everything has to work together Cell phones, tablets, laptops, printers, Cameras, clocks, a/c, door locks Active Directory, Web Filter, Radius, vlans, streaming, SNMP, routing, ACL Computers from Office Depot and Wal-mart

Home Network Internet

Enterprise Network WAN

Enterprise Network WAN Data Center Internet Cloud Services Associated Title One Outside Vendors

Home Enterprise Router Speed: 1 1 Gigabit copper 30 10 Gigabit fiber / 1 Gigabit copper Switch -- Built into router 350 including stacks Wireless 1 AP and 1 SSID 1400 AP’s and multiple SSID’s DNS -- Built into router 30 Internal/external servers DHCP 250 addresses 16 Million addresses / Multiple subnets Firewall 1 way blocking 6 way permit/deny logic Filter -- Required Proxy Required for SSL decryption WCCP Needed to redirect traffic NAT 1 external IP 16 external IP Active Directory Heavily relied on Radius

Wireless 1450 access points parish wide IPSB-wifi Uses WPA2-Enterprise It’s a whole second network, no additional staff IPSB-wifi Use your username and password to login Uses WPA2-Enterprise Not compatible with Direct Connect Wireless printers, home electronics Uses 802.11 s and ac Slower standards destroy wireless throughput 802.11 a/b/g/n/s/ac

Wireless - Why For testing For future BYOD or 1:1 projects For teacher mobility (wires in wrong places) Not for: Cell phones, updates Because you don’t want to see the blue wires To watch movies on your tablet

Closing Be suspicious of email Much more complex than a home network Network is a shared resource http://help/portal