Petros Lam VP, Sales & Marketing The Hong Kong School Net Ltd

School Network Internet WebSAMS HTTP Server Router Workstations Wifi Network Attack WebSAMS Server WebSAMS Crystal Report Workstation Network Firewall Teachers ServerIntranet Server Server Attack Security Vulnerabilities  Systems (Win2000, RH7.2)  Application (Web, PhPBB, FTP) Security Vulnerabilities  Systems (Win2000, RH7.2)  Application (Web, PhPBB, FTP) General Suggestions: Security Audit Upgrade Firewall Update Systems and Applications FREQUENTLY Change Password FREQUENTLY General Suggestions: Security Audit Upgrade Firewall Update Systems and Applications FREQUENTLY Change Password FREQUENTLY Application Firewall

School Network Internet WebSAMS HTTP Server Router Workstations Wifi WebSAMS Server WebSAMS Crystal Report Workstation Network Firewall Teachers ServerIntranet Server General Suggestions: Security Audit Upgrade Firewall Update Systems and Application FREQUENTLY Change Password FREQUENTLY General Suggestions: Security Audit Upgrade Firewall Update Systems and Application FREQUENTLY Change Password FREQUENTLY Application Firewall Difficulties in Daily Operation: Method and types of attacks change rapidly, difficult for schools to follow the latest updates. Heavy teaching work load makes it difficult to maintain and update such an complicated network security environment by teachers themselves. Limited resources for schools to afford expensive solutions and services for commercial use. Many companies only sell products and lack skills, knowledge and the right to modify the product they provide. Difficulties in Daily Operation: Method and types of attacks change rapidly, difficult for schools to follow the latest updates. Heavy teaching work load makes it difficult to maintain and update such an complicated network security environment by teachers themselves. Limited resources for schools to afford expensive solutions and services for commercial use. Many companies only sell products and lack skills, knowledge and the right to modify the product they provide.

School Network Internet WebSAMS HTTP Server Router Workstations Wifi WebSAMS Server WebSAMS Crystal Report Workstation Network Firewall Teachers ServerIntranet Server Application Firewall  Regular update managed by Professional Team who developed SCHOOLWALL.  Tailored for Schools in Hong Kong.  User Friendly Interface – reduce time to learn and operate.  Affordable price  Regular update managed by Professional Team who developed SCHOOLWALL.  Tailored for Schools in Hong Kong.  User Friendly Interface – reduce time to learn and operate.  Affordable price

School Network Internet WebSAMS HTTP Server Router Workstations Wifi Network Attack WebSAMS Server WebSAMS Crystal Report Workstation Network Firewall Teachers ServerIntranet Server Server Attack Security Vulnerabilities  Systems (Win2000, RH7.2)  Application (Web, PhPBB, FTP) Security Vulnerabilities  Systems (Win2000, RH7.2)  Application (Web, PhPBB, FTP) General Suggestions: Security Audit Upgrade Firewall Update Systems and Application FREQUENTLY Change Password FREQUENTLY General Suggestions: Security Audit Upgrade Firewall Update Systems and Application FREQUENTLY Change Password FREQUENTLY Application Firewall Difficulties in Daily Operation: Method and types of attacks change rapidly, difficult for schools to follow the latest updates Limited resources for schools to afford expensive solutions and services for commercial use. Heavy teaching work load make it difficult to maintain and update such an complicated network security environment by teachers themselves. Many companies only sell products and lack skills, knowledge and the right to upgrade the product they provide. Difficulties in Daily Operation: Method and types of attacks change rapidly, difficult for schools to follow the latest updates Limited resources for schools to afford expensive solutions and services for commercial use. Heavy teaching work load make it difficult to maintain and update such an complicated network security environment by teachers themselves. Many companies only sell products and lack skills, knowledge and the right to upgrade the product they provide.

Latest and Upgraded Functions: User Friendly Interface Packet Filtering URL Filtering Classroom Control Finer access control Bandwidth control Application Protection Web FTP Statistics Expansion Module

New User Friendly Interface

NAT Mapping Filter Rule Packet Filtering Static NAT

URL Filtering Transparent Proxy (TCP/Port 80) Global default deny list Configuration – Control Areas: Domain, Keyword, URL, IP address – Permit: Allow exceptions in global deny list – Deny: Deny additional objects in control areas – No-Cache: Do not cache specific domains / IPs – My Domains: Permit all and do not cache self domains sites

URL Filtering Transparent Proxy (TCP/Port 80) Global default deny list

Classroom Control Additional control on a set of fixed IP addresses – Examples: IP range for staff, computer rooms Domain Blocking / Unblocking – Allow List : Default deny all but allow exception in domains – Deny List : Adding domain block list to global deny list – Deny All : Deny all access, no exceptions – Allow All : Allow all access (no blocking) Bandwidth Control – Guarantee Bandwidth – Maximum Bandwidth

Example of adding “Deny List” URL filter Sendspace.com + Classroom Control + Zone control “Deny List” yahoo.com

G – Guarantee Bandwidth M – Maximum Bandwidth Maximum Bandwidth limt the download speed Testing URL: ftp://download.speedtest.com.hk/100mb.zip Bandwidth Control Classroom Control

Application Protection - Web Setting up Receiving Request Analysis Denied If not allowed Example of blocking SQL injection

Application Protection - FTP Set a password retry limit to the connection. If exceed the limit, the IP will be banned for a fixed period of time.

Application Protection - Anti-spam mechanisms: DNSBL Greylisting SPF DKIM Sender White / Black Listing Self define White / Black list Sender blacklisting

Statistics - N etwork Traffic Bandwidth Graphs

Gateway Statistics Statistics - N etwork Traffic

Expansion Module – Server Certificate

Comparison Network ProtectionInvestmentConsequence No Firewall$0Serious! Self Developed Firewall Time of Teachers Very difficult to upgrade Commercial Firewall Very Expensive Lack maintenance and support Very Affordable Install, Update, Upgrade, Support - VPN, Lab, Proxy, Filter

~The End~ Thank you!