Rwanda GovNet Xuan Pan Nkusi Issa Claude Hakizimana Joakim Slettengren Innocent Nkurunziza Xuan Pan Nkusi Issa Claude Hakizimana Joakim Slettengren Innocent Nkurunziza Team 2 -

Rwanda GovNet2 Agenda  Project background  Goals  Implementation phase  Video  Conclusions  Future recommendations  Questions  Project background  Goals  Implementation phase  Video  Conclusions  Future recommendations  Questions

Rwanda GovNet3 Project background Goals Implementation phase Video Conclusions Future recommendations Questions Project background Goals Implementation phase Video Conclusions Future recommendations Questions

Rwanda GovNet4 Project background  A new fiber optic network was installed for government departments in Kigali, Rwanda  Faced network instability due to viruses, DoS etc.  Difficult to detect or prevent the user causing problems  Difficult to monitor who was using the network resources  Lack of network policies  A new fiber optic network was installed for government departments in Kigali, Rwanda  Faced network instability due to viruses, DoS etc.  Difficult to detect or prevent the user causing problems  Difficult to monitor who was using the network resources  Lack of network policies

Rwanda GovNet5 GovNet pilot project requirements  Pilot project for selected nodes of the network  Establish basic network security  Bandwidth monitoring, network management  Create network policies  Easy to use and cheap, open source  Pilot project for selected nodes of the network  Establish basic network security  Bandwidth monitoring, network management  Create network policies  Easy to use and cheap, open source

Rwanda GovNet6 Principal  First principal, RITA, Rwanda Information and Technology Authority  The GovNet team got a new principal in March, Ministry of Infrastructure  Changes of the goals  Focus mainly on Ministry of Infrastructure and its PSOs (RITA)  First principal, RITA, Rwanda Information and Technology Authority  The GovNet team got a new principal in March, Ministry of Infrastructure  Changes of the goals  Focus mainly on Ministry of Infrastructure and its PSOs (RITA)

Rwanda GovNet7 Project background Goals Implementation phase Video Conclusions Future recommendations Questions Project background Goals Implementation phase Video Conclusions Future recommendations Questions

Rwanda GovNet8 Goals 1 /2  Replace Linux routers with network equipment  Increase connectivity between government departments  Develop an AUP  Present a network security solution  Present a network management solution  Replace Linux routers with network equipment  Increase connectivity between government departments  Develop an AUP  Present a network security solution  Present a network management solution

Rwanda GovNet9 Goals 2/2  Demonstrate VoIP in at least two sites  Conduct a training session to ensure the sustainability of the solutions  Demonstrate VoIP in at least two sites  Conduct a training session to ensure the sustainability of the solutions

Rwanda GovNet10 Project background Goals Implementation phase Video Conclusions Future recommendations Questions Project background Goals Implementation phase Video Conclusions Future recommendations Questions

Rwanda GovNet11 Equipment procurement  Uncertain funding delayed the equipment procurement  Quotations were collected  New funding agency  new procurement rules  New tender opening date, June 1 st 2006  Uncertain funding delayed the equipment procurement  Quotations were collected  New funding agency  new procurement rules  New tender opening date, June 1 st 2006

Rwanda GovNet12 Temporary solution  Desktop computers  Borrowed network equipment from other not yet implemented ICT projects  Desktop computers  Borrowed network equipment from other not yet implemented ICT projects

Rwanda GovNet13 GovNet topology  Separate VLAN in the fiber backbone  Using one centralized gateway  Removed NATs at the nodes  Separate VLAN in the fiber backbone  Using one centralized gateway  Removed NATs at the nodes

Rwanda GovNet14 Security Solution for GovNet 1. Cost-efficient 2. Centralized 3. Scalable 1. Cost-efficient 2. Centralized 3. Scalable and decentralized

Rwanda GovNet15 Methodology Risk analysis Acceptable User Policy System Weakness analysis-Nessus IntrusionDetection System 802.1x+Radius EAP-TLS Attack Impact Create Exploited Result in Reduce Decrease Discover Protect Deterrent Control Detective Control Preventative Control Trigger Corrective Control Vulnerability Threat ???

Rwanda GovNet16 AUP and Update service Microsoft Windows Server Update Services (WSUS) Microsoft Windows Server Update Services (WSUS) Acceptable User Policy Best Practices

Rwanda GovNet17 Nessus Each ministry has one scanner To use free plug-ins To use selected plug-ins when scanning To use selected plug-ins when scanning

Rwanda GovNet18 Certification Authority And Authentication Server Authentication Challenge one decentralization … … Ministry A … Ministry B ISP x x Terracom Certification Authority And Authentication Server Client side certificate Certificate of CA Server side certificate Certification Authority And Authentication Server

Rwanda GovNet19 Authentication Challenge two Alcatel Switch issue Procurement Contract Supplier Configuration Guide Trail version Update Pre-study Phase Implementation Phase Currently Future

Rwanda GovNet20 Intrusion Detection System … Ministry A Sensor SQL … Ministry B Sensor SQL … Snort Center ACID ISP Sensor SQL

Rwanda GovNet21 Intrusion Protection System -- Modules 1.Configuration File 2.Debug mode or Daemon 3.Ignore list 4.System information detection module 5.Database communication module 6.Action module 7.Log module

Rwanda GovNet22 Intrusion Protection System --Function Diagram

Rwanda GovNet23 Training session Basic of network security such as security planning, policies and mechanisms 1. Network monitoring with Nagios 2. Network vulnerability scan with Nessus 1. AAA 2. Intrusion detection system with Snort 3. Intrusion protection program Network management and bandwidth monitoring with NTOP

Rwanda GovNet24 Network management 1/3  Installed and configured Nagios host and service monitor  Sends notifications  Will be extended with SMS notifications  Sends notifications  Will be extended with SMS notifications

Rwanda GovNet25 Network management 2/3  Installed MRTG  Monitors the external bandwidth  Monitors throughput at each node  Will monitor the equipment of the ISP  Installed MRTG  Monitors the external bandwidth  Monitors throughput at each node  Will monitor the equipment of the ISP

Rwanda GovNet26 Network management 3/3  Installed NTOP  Monitors user bandwidth usage  Can find viral activity  Can find file sharing users  Installed NTOP  Monitors user bandwidth usage  Can find viral activity  Can find file sharing users

Rwanda GovNet27 VoIP demonstration  Installed the SIP server SER  Used software clients  Tested between users at Mininfra and RITA  Can be extended with hardware phones  Installed the SIP server SER  Used software clients  Tested between users at Mininfra and RITA  Can be extended with hardware phones

Rwanda GovNet28 Project background Goals Implementation phase Video Conclusions Future recommendations Questions Project background Goals Implementation phase Video Conclusions Future recommendations Questions

Rwanda GovNet29 Project background Goals Implementation phase Video Conclusions Future recommendations Questions Project background Goals Implementation phase Video Conclusions Future recommendations Questions

Rwanda GovNet30 Conclusions  Despite the delayed equipment, the GovNet team were able to partly fulfill all goals  The equipment will most probably arrive Rwanda in mid June  The three Rwandan team members will then install the solutions and return the borrowed equipment  Despite the delayed equipment, the GovNet team were able to partly fulfill all goals  The equipment will most probably arrive Rwanda in mid June  The three Rwandan team members will then install the solutions and return the borrowed equipment

Rwanda GovNet31 Project background Goals Implementation phase Video Conclusions Future recommendations Questions Project background Goals Implementation phase Video Conclusions Future recommendations Questions

Rwanda GovNet32 Future Recommendations  Ways of optimizing ICT investments, better planning  Better documentation  Centralized web caching  More spare equipment  GovNet intranet  Ways of optimizing ICT investments, better planning  Better documentation  Centralized web caching  More spare equipment  GovNet intranet

Rwanda GovNet33 Project background Goals Implementation phase Video Conclusions Future recommendations Questions? Project background Goals Implementation phase Video Conclusions Future recommendations Questions?

Rwanda GovNet34 Thanks for listening Rwanda GovNet team Rwanda GovNet team