Thursday, November 05, 2015 1 Web Filtering Service ONE Consortium.

Thursday, April 20, 2023

1

Web Filtering Service

ONE Consortium


2

Introduction

The Children’s Internet Protection Act (CIPA) requires technological protection measures to

filter Internet access of content harmful to minors.

As such, all districts have purchased some form of web filtering (Secure Computing, DansGuardian,

Websense, etc.)


3

Purpose

• Protect the innocence of students

• E-Rate funding compliance

• Reporting

• Auditing

• Monitoring


4

Benefit

• Cost Savings• Bulk Licensing• Time

• Technical Setup, maintenance

• Hardware• Power, Cooling, Rack space


5

Project Timeline

November 2007 - Discuss at Tech Directors meeting November 2007 - Assemble planning and evaluation team November 2007 - Create Design PlansDecember 2007 - Create testing plansFebruary 2007 - Create RFPMarch 2008 - Committee presents to Tech DirectorsMarch 2008 - RFP’s outApril 2008 - RFP’s inApril 2008 - Install and test systemMay 2008 - Production


6

Example BudgetExample Budget:(6) HP DL360 G5 Network agent server Unit Price: $3,500.00(1) HP DL360 G5 Dual Processor management server Unit Price: $4,800.00(7) iLo license Unit Price: $

235.00(7) Symantec Antivirus Client license Unit Price: $

11.16(6) ISA Server 2006 License Unit Price:

$1,056.23(6) Windows 2003 Server License Unit Price: $ 259.49 (100,000 users) Licensing for filtering software (3 years) [1] Unit Price: $191,000.00 Order Total: $225,417.40

Cost breakdowns to ~$0.75 per user a year for 3 years

[1] High estimate based on Wayne RESA bid RFP #07-284-006


7

Example Layout

Primary Head End

Secondary Head End

Quest

Level 3

INTERNET

ISA Proxy 1

ISA Proxy 3

ISA Proxy MGMT Server

ISA Proxy 2

ISA Proxy 3

ISA Proxy 1

ISA Proxy 2


8

District Filtering Survey ResultsLicense Expiration

Bold Italicized cells align with planned implementation timeframe

District License expires District License expires

Clawson 4th Quarter 2007 Waterford 3rd quarter 2008

Troy 4th quarter 2007 South Lyon 3rd quarter 2008

Southfield 1st quarter 2008 Lake Orion 2nd quarter 2009

Farmington 2nd Quarter 2008 Novi 2nd quarter 2009

Ferndale 2nd Quarter 2008 Royal Oak 2nd quarter 2009

Holly 2nd Quarter 2008 Bloomfield Hills 1st quarter 2010

Lamphere 2nd quarter 2008 Brandon 2nd quarter 2010

Oakland Schools 2nd quarter 2008 Hazel Park 2nd Quarter 2010

Oxford 2nd quarter 2008 Walled Lake 4th quarter 2010

Pontiac 2nd quarter 2008 Avondale After 2010

West Bloomfield 2nd quarter 2008 Birmingham After 2010

Clarenceville 3rd quarter 2008 Clarkston After 2010

Madison 3rd quarter 2008 Huron Valley Doesn't expire

Oak Park 3rd quarter 2008 Berkley Doesn't expire

Rochester 3rd quarter 2008 . .


9

District Filtering Survey ResultsInterest Level

Respondants Interest Level

Very High

High/Very High

High

High/Indifferent

Indifferent

Low

Very Low

Interest Level* Respondents

High 17

Undecided 4

Low 8 * High = High, Very High

Undecided = Indifferent

Low = Low and Very Low


10

Web Filtering Team

• Volunteer group of 9– 2 members from Oakland Schools– 7 members from 7 different districts

• Experienced with networking and filtering

• Knowledge of their district’s needs

• Some travel may be required for demonstrations and evaluations


11

Questions and Comments


12

Handouts

Next two slides contain the handouts


13Web Filtering Product Your solution is License expires Please describe your configuration in detail Interest Level for consotium hosted filtering Barracuda Web Content Filter Hardware Based 2nd quarter 2012 Hardware appliance inline filtering all external request Indifferent-HighDan's Guardian Software Based No Expiration Linux Server with Squid/DansGuardian IndifferentWebsense Hardware Based After 2010 Websense appliance Very Low

Astaro Security Linux Software 1st quarter 2010Dell server running Astaro Security Linux which performs firewall, NAT, SMTP and proxy/content filtering duties

Low at this point. In my experience a content filter requires constant adjustment based on the users’ needs, I’m not sure that filtering at your level would be responsive enough.

Barracuda Hardware Based 2nd quarter 2010 HighSecure Computing Hardware Based 3rd quarter 2008 Appliance with all traffic routed threw Very HighBarracuda Hardware Based After 2010 Proprietary Barracuda Server HighSt. Bernard iPrism Hardware Based 4th Quarter 2007 Appliance solution provided by St. Bernard IndifferentWebsense Hardware Based 2nd Quarter 2008 Stand alone works with firewall and LDAP exitSurfcontrol Software Based 2nd Quarter 2008 Stand alone Novell with Bordermanager 3.8 Very High8e6 Hardware Based 2nd Quarter 2010 Appliance Low

Astaro Software 2nd Quarter 2008Changing installation from 2 Standalone appliances, running Border Manager atop Novell Netware 6.5 Low, since we made investment in Astaro

Dan's Guardian with URLBlacklist Software Based No Expiration High

Surfcontrol Software Based 2nd quarter 2009

Border Manager 3.8 running on Netware 6.5 using ACL's for specific permits and denies. Using Surf Control 6.1 for mass Web Filtering. Indifferent

8e6 Hardware Based 2nd quarter 2008 8e6 TechnologiesR3000IR box Version Number: 2.0.00 HighSonicwall Hardware Based 3rd quarter 2008 Sonicwall inline passthrew Appliance high/very high

Websense Software Based 2nd quarter 2009Newest version of websense running on a windows server configured to work with Cisco Firewall Very High

Watchgaurd Firebox with Web Blocker Hardware Based 3rd quarter 2008 Appliance Low

Websense Software Based 2nd quarter 20083 HP DL360 G5's running ISA 2006 with a separate management server Very High

Secure Computing Software Based 2nd quarter 2008

Secure Computing BESS ISA version (Smart Filter version 4.2). Our server is running ISA version 2004, server is Dual 3.6G zeon processors, 3.5GB of RAM. High

Surfcontrol Software Based 2nd quarter 2008 HighSurfcontrol Software Based 3rd quarter 2008 Celestix MSA 4000 Appliance running ISA and Surfcontrol. IndifferentSecureConputing Smartfilter Bess Edition Software Based 2nd quarter 2009 Linux OS RHEL with Squid Low

Novell BorderManager - Cyber Patrol access listing / Surfcontrol Software Based

4th quarter 2008 / 3rd quarter 2008

Compaq/HP DL530, Novell 6.0 running BorderManager with Proxy Server Access. / HP DL380 running Bordermanager 3.9 with SurfControl content database. High / Indifferent

Surfcontrol Software Based 1st quarter 2008 ISA firewall with Surfcontrol content filter HighSecure Computing Software Based 4th quarter 2007 Plugin to ISA Server 2004 HighBarracuda Hardware Based 4th quarter 2010 Barrcuda 810 Very LowSymantec Web Security Software Based 3rd quarter 2008 LowSecure Computing Hardware Based 2nd quarter 2008 ISA server in every building Very High

Unabridged Survey Results


141st Meeting Agenda (conference call)

1. Introductions 2. Current Web Filters used 3. Chose Web Filters to evaluate 4. Create testing plan

a. Feature comparison i. List features that are important/needed

b. Performance c. Reporting Capabilities

5. Revise project timeline a. November 2007 - Discuss at Tech Directors meeting b. November 2007 - Assemble planning and evaluation team c. November 2007 - Meet with planning and evaluation team d. November 2007 - Create Design Plans e. December 2007 - Create testing plans f. December 2007 – Create Draft RFP with specifications g. February 2008 - Demonstrate a Web Filter design h. March 2008 - Decision to purchase i. March 2008 - RFP’s out j. April 2008 - RFP’s in k. April 2008 - Install and test system l. May 2008 - Production

6. Questions and Answers

Goals

1. To create a centralized (possibly distributed) web filtering solution that meets the needs of all districts.

2. Save money on web filtering.

Concerns

What if I want to block something another district wants to allow? The ideal web filtering solution will allow for multiple managers each allowed to modify there own subnet’s block and allow settings. What if I use NAT and want reports based on student or workstation? This is one concern the team will have to address or look to distributed deployment.

Thursday, November 05, 2015 1 Web Filtering Service ONE Consortium.

Documents

Transcript of Thursday, November 05, 2015 1 Web Filtering Service ONE Consortium.