COLUMBIA SCHOOL DISTRICT

WEB FILTERING

June 2007

We decided to enter into a 3 year contract with Secure Computing (N2H2) for Web filtering services because I did not believe that AT&T was going to have what we needed in time for school to start (Aug 2007)

The 3 year was a 3 for 2 deal. (Cost about $3.00 per computer per year)

What CSD Demanded

• Ability to filter by groups (teachers, students, office and administrators)

• Ability to whitelist sites quickly.• Ability to allow users to easily request site

reviews.• Ability to design a system that was difficult to

beat. (Integration of filter with other security components)

Components of the Filtering System

• Management Server

• Filtering Server

• Reporting Server

(Can be all in one)

Platforms for the Management & Reporting System

– Windows 2000 SP4– Windows 2003 SP2– Windows 2003 SP1– Windows XP Pro SP2– Windows Vista– Red Hat ES 3.0 Update 6– Red Hat ES 4.0 Update 2– Red Hat ES 5.0– Red Hat ES 5.1– Solaris 8/9/10

Filter Server Platforms (IFP or Proxy)Check Point FireWall-1

Check Point FireWall-1 NGX R65 for Windows 2003 Server SP2

Cisco ASA – Adaptive Security Appliance (via IFP)

Cisco Content Engine (via IFP)

Cisco IOS Firewall (via IFP)

Cisco PIX Firewall (via IFP)

Cisco PIX v6.2 and later

Microsoft ISA Server 2006

Microsoft ISA Server 2004

Microsoft ISA Server 2004

Microsoft ISA Server 2000

MS ISA Server 2000 SP2 for Windows 2003 SP2

MS ISA Server 2000 SP2 for Windows 2000 SP4

Nortel (via IFP)

Nortel ACC v3.0 or later

Nortel ASF

SonicWALL (via IFP)

SonicWALL v6.3 or later

Squid Proxy Server

Stratacache (via IFP)

Sun Java System Web Proxy Server

Sun Java System Web Proxy Server 4.0.6 for Solaris 8, 9, and 10 Sun Java System Web Proxy Server 4.0.4 for Solaris 8, 9

3Com SuperStack

Blue Coat Proxy SG

Blue Coat (Network Appliance) NetCache

Cisco Content Engine and Content Engine Network Module (supported for SmartFilter 4.1.1 and earlier versions)

Computer Associates eTrust Intrusion Detection

Computer Associates eTrust Secure Content Manager

eSoft InstaGate

Hewlett Packard TRU64

McAfee Secure Content Management Appliances

NetIQ WebMarshal

Netopia Parental Controls

Novell BorderManager

Secure Computing Sidewinder® G2 Firewall™

Secure Computing Sidewinder G2 Security Appliance

COLUMBIA SCHOOL DISTRICT

RedHat 5.1 Proxy Server

(At each school)

Windows 2003 Management/Reporting

(Central Office)

PROS1. I am not at the mercy of AT&T2. New filter sites updated every night3. Update deployment is simple4. Comprehensive Reporting5. Ability to filter by, IP Address group or by

Active Directory groups.6. Proxy server method reduces network

traffic.7. Easy for users to request reviews. 8. Tech Support is OUTSTANDING!!!

CONSNot a piece of cake to install the Linux server

applications. Recompiles Squid.Configuration of the manager was not very

intuitive for me. Instructions were not very helpful. Presumed that the installer would understand the terms that were not used in the conventional sense.

MANAGEMENT CONSOLE

Management Console

Management Console

Management Console

Management Console

Management Console93 Categories

Report Generator

Report Generator

Report Generator

Report Generator

Report Generator

Report Generator