2. Petros Lam VP, Sales & Marketing The Hong Kong School Net Ltd

3. School Network Internet WebSAMS HTTP Server Router Workstations Wifi Network Attack WebSAMS Server WebSAMS Crystal Report Workstation Network Firewall Teachers ServerIntranet Server Server Attack Security Vulnerabilities  Systems (Win2000, RH7.2)  Application (Web, PhPBB, FTP) Security Vulnerabilities  Systems (Win2000, RH7.2)  Application (Web, PhPBB, FTP) General Suggestions: Security Audit Upgrade Firewall Update Systems and Applications FREQUENTLY Change Password FREQUENTLY General Suggestions: Security Audit Upgrade Firewall Update Systems and Applications FREQUENTLY Change Password FREQUENTLY Application Firewall

4. School Network Internet WebSAMS HTTP Server Router Workstations Wifi WebSAMS Server WebSAMS Crystal Report Workstation Network Firewall Teachers ServerIntranet Server General Suggestions: Security Audit Upgrade Firewall Update Systems and Application FREQUENTLY Change Password FREQUENTLY General Suggestions: Security Audit Upgrade Firewall Update Systems and Application FREQUENTLY Change Password FREQUENTLY Application Firewall Difficulties in Daily Operation: Method and types of attacks change rapidly, difficult for schools to follow the latest updates. Heavy teaching work load makes it difficult to maintain and update such an complicated network security environment by teachers themselves. Limited resources for schools to afford expensive solutions and services for commercial use. Many companies only sell products and lack skills, knowledge and the right to modify the product they provide. Difficulties in Daily Operation: Method and types of attacks change rapidly, difficult for schools to follow the latest updates. Heavy teaching work load makes it difficult to maintain and update such an complicated network security environment by teachers themselves. Limited resources for schools to afford expensive solutions and services for commercial use. Many companies only sell products and lack skills, knowledge and the right to modify the product they provide.

5. School Network Internet WebSAMS HTTP Server Router Workstations Wifi WebSAMS Server WebSAMS Crystal Report Workstation Network Firewall Teachers ServerIntranet Server Application Firewall  Regular update managed by Professional Team who developed SCHOOLWALL.  Tailored for Schools in Hong Kong.  User Friendly Interface – reduce time to learn and operate.  Affordable price  Regular update managed by Professional Team who developed SCHOOLWALL.  Tailored for Schools in Hong Kong.  User Friendly Interface – reduce time to learn and operate.  Affordable price

6. School Network Internet WebSAMS HTTP Server Router Workstations Wifi Network Attack WebSAMS Server WebSAMS Crystal Report Workstation Network Firewall Teachers ServerIntranet Server Server Attack Security Vulnerabilities  Systems (Win2000, RH7.2)  Application (Web, PhPBB, FTP) Security Vulnerabilities  Systems (Win2000, RH7.2)  Application (Web, PhPBB, FTP) General Suggestions: Security Audit Upgrade Firewall Update Systems and Application FREQUENTLY Change Password FREQUENTLY General Suggestions: Security Audit Upgrade Firewall Update Systems and Application FREQUENTLY Change Password FREQUENTLY Application Firewall Difficulties in Daily Operation: Method and types of attacks change rapidly, difficult for schools to follow the latest updates Limited resources for schools to afford expensive solutions and services for commercial use. Heavy teaching work load make it difficult to maintain and update such an complicated network security environment by teachers themselves. Many companies only sell products and lack skills, knowledge and the right to upgrade the product they provide. Difficulties in Daily Operation: Method and types of attacks change rapidly, difficult for schools to follow the latest updates Limited resources for schools to afford expensive solutions and services for commercial use. Heavy teaching work load make it difficult to maintain and update such an complicated network security environment by teachers themselves. Many companies only sell products and lack skills, knowledge and the right to upgrade the product they provide.

7. Latest and Upgraded Functions: User Friendly Interface Packet Filtering URL Filtering Classroom Control Finer access control Bandwidth control Application Protection Web FTP Email Statistics Expansion Module

8. New User Friendly Interface

9. NAT Mapping Filter Rule Packet Filtering Static NAT

10. URL Filtering Transparent Proxy (TCP/Port 80) Global default deny list Configuration – Control Areas: Domain, Keyword, URL, IP address – Permit: Allow exceptions in global deny list – Deny: Deny additional objects in control areas – No-Cache: Do not cache specific domains / IPs – My Domains: Permit all and do not cache self domains sites

11. URL Filtering Transparent Proxy (TCP/Port 80) Global default deny list

12. Classroom Control Additional control on a set of fixed IP addresses – Examples: IP range for staff, computer rooms Domain Blocking / Unblocking – Allow List : Default deny all but allow exception in domains – Deny List : Adding domain block list to global deny list – Deny All : Deny all access, no exceptions – Allow All : Allow all access (no blocking) Bandwidth Control – Guarantee Bandwidth – Maximum Bandwidth

13. Example of adding “Deny List” URL filter Sendspace.com + Classroom Control + Zone control “Deny List” yahoo.com

14. G – Guarantee Bandwidth M – Maximum Bandwidth Maximum Bandwidth limt the download speed Testing URL: ftp://download.speedtest.com.hk/100mb.zip Bandwidth Control Classroom Control

15. Application Protection - Web Setting up Receiving Request Analysis Denied If not allowed Example of blocking SQL injection

16. Application Protection - FTP Set a password retry limit to the connection. If exceed the limit, the IP will be banned for a fixed period of time.

17. Application Protection - Email Anti-spam mechanisms: DNSBL Greylisting SPF DKIM Sender White / Black Listing Self define White / Black list Sender blacklisting

18. Statistics - N etwork Traffic Bandwidth Graphs

19. Email Gateway Statistics Statistics - N etwork Traffic

20. Expansion Module – Server Certificate

21. Comparison Network ProtectionInvestmentConsequence No Firewall$0Serious! Self Developed Firewall Time of Teachers Very difficult to upgrade Commercial Firewall Very Expensive Lack maintenance and support Very Affordable Install, Update, Upgrade, Support - VPN, Lab, Proxy, Filter

22. ~The End~ Thank you!