Myles Fenton January 2008 Monash Internet service 2008

2 Proxy what? Monash has been running an Internet service for staff and student Internet access since the early 1990’s. For security, auditing and billing purposes Monash has directed staff and student Internet traffic via a ‘proxy’ server farm.

3 The current problem…the business drivers Monash runs gigabit ethernet to every edge port. Monash has a dual gigabit connection to the Internet. The proxy farm has an ever increasing load which is gradually causing performance degradation and this can make the internet appear ‘slow’. The proxy farm is on 4 year old hardware which needs refreshing.

4 The new Internet service for 2008 Solution objective: to continue to provide fast authenticated internet access to the Monash community. The solution: Wire speed Internet authentication and auditing hardware The Cisco SCE hardware is Redundant, highly available and offers 4Gb/s switching with layer 7 packet inspection at micro second latency

5 new Internet service for 2008 New Look Authentication… 2. New web authentication for wired computers: 3. New authentication for wireless 1. Current proxy authentication:

6 new Internet service for 2008 Browser settings the monash proxy.pac needs to be removed

7 new Internet service for 2008 New access New IP range for direct internet access move to public IP’s

8 new Internet service for 2008 Server subnets – IP addresses Staff IP addresses Commercial IP addresses Research IP addresses Wireless ,768 IP addresses VOIP ,768 IP addresses Students ,768 IP addresses IP authentication User authentication

9 new Internet service for 2008 new Internet authentication exemption: (previously mandatory proxy exemption “MPA exemption”) > User Auth IP Auth NetClass:

10 new Internet service for 2008 Internet billing: Introduction of “un-quoated” downloads for Research & Education locations (“on-net”).

11 new Internet service for 2008 Internet logout…why? So when the next person users the computer, they are asked to authenticate and their Internet usage is tracked against their username not yours. Internet logout in the staff environment

12 new Internet service for 2008 Internet logout in the student computer lab environment is the windows/Novell and Linux/MacOSx session logout.

13 new Internet service for 2008 Internet logout in the wireless environment is controlled by disconnecting from the wireless network.

14 Time frames Friday January New service available on x.y staff and x.y student and wireless networks. ITS Service desk support start and ITS public web pages available Monday 25 February 2008 (start of semester) Some faculties will have done the IP migration for student labs and re-imaged the computer labs with the logout settings. Some faculties will have migrated their staff networks. 30 June 2008 Faculties are asked to have migrated their staff and students by mid year. ITS will be encouraging faculties to migrate as early as possible. Existing socks and web proxy farm to be switched off and decommissioned. 20 December 2008 Fall back date for decommissioning web and socks proxy service.

15 Questions? FAQ located at:

16 new Internet service for 2008 Improved Control …. Internet users can be placed into profiles. Each profile can allow/deny certain applications at pre defined speeds

17 new Internet service for 2008 Usage Control… Student usage could? be shaped with weekly quota allocations to curb inappropriate use.